Failure of sandboxing

Unlike other posters, to me it seems perfectly reasonable that a help viewer should be able to execute JavaScript. I could imagine a variety of ways that this could be useful to users.

I also think it’s unreasonable to expect that Yelp would be secure. There’s tons of small programs like Yelp that make up a usable desktop. We can’t expect every one of them to not make any mistakes.

I think the failure here is that the operating system grants these programs the capability to e.g. access arbitrary files, and contact arbitrary hosts on the Internet over arbitrary protocols.