Potential malicious uses of javascript?
<p>In Firefox 6, you can no longer put javascript in the address bar because of security risks such as recent scripts on facebook. I understand it can simulate just about anything you can click, like removing friends and spamming wall posts, but what's the absolute worst? It can only manipulate the page you're on because of cross-domain iframe javascript being disabled, unless it sends an XMLHttpRequest based on cookie data. </p>

<p>What exactly were the scripts on facebook doing that made it such a big problem? What's the worst that can be done?</p>
