But a malicious proxy doesn't need to insert Javascript to get your browser to do naughty things, since it can just manipulate the upstream anyway. Not to menti

But a malicious proxy doesn't need to insert Javascript to get your browser to do naughty things, since it can just manipulate the upstream anyway. Not to mention inject Javascript into HTML pages as they come down.