> What can a unsandboxed javascript engine do? It can do everything that the user could do, and the user in this case is SYSTEM. I understand SYSTEM can do ev

> What can a unsandboxed javascript engine do? It can do everything that the user could do, and the user in this case is SYSTEM. I understand SYSTEM can do everything. It could install a keylogger, for instance.