Bug 1092066: Prevent javascript links from cartridges