Did you read the history?

http://www.solutions.fi/index.cgi/news_2001_11_09?lang=eng

it scared me more than the bug itself.

I'm switching to NS today.

>But then, you have everything else, and if you turn off all scripting, you can still access UT (except that the login button doesn't work, and a few other things :). NS can switch on/off Java, Javascript in browser, and Javascript in mail/newsgroups. Now what's active scripting, is it not any of these three?