While I respect the security implications of allowing scripts to be run within live bookmarks, it seems like a hidden config for such an option would be useful for companies who want to deploy advanced live bookmarks containing bookmarklets for use with intranet applications. Say it is a whitelist that says “allow this to occur on my intranet domain”. Sure a rogue employee could whip something up to do harm, but that is a company issue.

What I wanted to do with javascript in RSS was maintain a feed of bookmarklets for an particular intranet process. This way we did not have to write any scripts altering user bookmarks, etc - just subscribe to this feed of bookmarklets and we’ll do the rest. I suspect we can do something similar with a sidebar or firefox extension - but it justs more work (more components to break down) instead of using a really simple process to manage a constantly changing list of links.