Yeah forester, I'd have to agree noscript comes in handy here.
But noscript can't protect you from everything. The user has to be cautious too :)