Comment
Comment by danielearwicker
It ought to be possible for the page to disable JavaScript with a meta tag:
The browser could put an extra icon next to the https padlock so the user would know they were viewing a document rather than an application.