Since your message was rather long, I won't go through it point by point,
but rather present my argument as my general perspective on the whole
scripting issue.
I still think that allowing a bunch of different languages to be used for
scripting and then "compiled" on the client is a mistake. I understand
that different languages are useful for different things, but by not
specifying a standard we increase the amount of work for browser writers
and new VRML page designers by a factor. I don't think that it will be
possible to scan all the different languages for viruses and it's a lot
to ask. I suggest that we use ONE language, interpreted, running in a
secure interpreter. This would simplify all of our problems. This
language could be Java, this could be something else, honestly I don't care,
but at the moment, technically Java seems the most obvious. I'm not sure how
easy Java code would be easy to write, I'll have to do some experiments.
Kevin