On: Javascript security

[DjDarkman]

The global scope thing is not entierly true, you can use closures to minimize the global scope usage.

The problem is not that bad: - on the server side, always sanitize user input - only put script tags from places you trust