Drive-by malware used to require Flash or Java... which used to always be enabled. Edit: don't disable local storage! you'll break lots of things that way, and

Drive-by malware used to require Flash or Java... which used to always be enabled. Edit: don't disable local storage! you'll break lots of things that way, and I don't think that includes WebSQL.