There's been discussion in subthreads about why sandboxed browser extensions are more protected from a malicious page hijacking parsing the URL. It's easy to f

There's been discussion in subthreads about why sandboxed browser extensions are more protected from a malicious page hijacking parsing the URL. It's easy to forget that sandboxed extensions don't exist yet in iOS (as of 9.3.3), and sometimes we still have to use bookmarklets. As far as I know, bookmarklets aren't afforded any level of sandboxing type protection. I wonder if a malicious page could intervene like that.