I can deal with web apps that require javascript to function, and I'll happily whitelist apps that I actually want to use. But I don't want to let every asshole

I can deal with web apps that require javascript to function, and I'll happily whitelist apps that I actually want to use. But I don't want to let every asshole with a blog or a newspaper that gets linked from reddit or hackernews execute code on my computer. I think that's a fairly reasonable position.