Hmm, well firefox could vet them so that they&#x27;re not 3rd party and the user could permit to inject &#x27;add ons&#x27; into every web page loaded.   You are allowed to upload html&#x2F;javascript dynamically (just not shared objects, jvm byte code, etc)