there's no security for it. There's always going to be a user (or two) who turns off Javascript (or feature-foo in Javascript).

(I threathened at one point to implement a menu choice of which Javascript features that I was going to allow my brower to run. It's still possible.)