YOu're not comprehending what I'm syaing... If the user doesn't type the timer, there is no problem. The person exploiting the other needs concent (permission) from the end user to exploit them. If they say "hey run this code" and the user says "no" -- no exploit. Now after saying no, how is it going to "keep open windows"?
