Is it a potential security issue or what?

What's the story on this?

JavaScript has no access to your computer, so there is not a security issue. I don't know of any modern browser that doesn't have JavaScript enabled by default. Which browsers are you referring to?

It gives you the option to disable it so websites, like spam/spyware, cant force you into doing something with popups etc.

Originally Posted by wayfarer07

JavaScript has no access to your computer, so there is not a security issue. I don't know of any modern browser that doesn't have JavaScript enabled by default. Which browsers are you referring to?

While the specification prevents this, not all implementations are so robust. There have been a few buffer-overflow exploits (and others) that have been used to gain access to the system.

IE has had the most exploits found but, firefox/opera/safari aren't immune either. Fortunately, most all of them have been pretty good about releasing patches on a regular basis.