Why is its safest to turn the “Delete SCRIPTs” control on?
Because Javascript can easily break you out of the-Cloak’s security. We try to filter Javascript to make it safe, but this is impossible to do in a completely general manner. If you are very concerned about security, don’t turn off script blocking except for sites you trust, and if you know exactly what you are doing. But.. do not turn off Javascript in your browser. The Cloak needs Javascript to make its control panel work.
