The problem with Javascript and security. Guest John Graham-Cumming says it's the "elephant in your browser."