Well, I got stopped as soon as I hit the Javascript-dependent template.

I realize I'm a bit on the fringe, here, and I've complained about it before. But I do not like "basic" web pages, e.g. this blog post, becoming dependent upon local execution of arbitrary code (in which camp I'm not including HTML and CSS).

For me, it's a matter of security. And I'll continue to whitelist, based upon established trust.