Comment by andrewclunn

So forgive my ignorance, but this would only be an issue if links can be placed on your site by others, where they also can embed javascript as part of the link, yes?

EDIT -

I mean aside from cases where you're intentionally using this on your site for unscrupulous reasons.