you want to prevent your browser from running javascript commands that are potentially harmful