From Overview of JavaScript II -- From Cookies to Dynamical HTML CPS616 Technologies of the Information Age -- Spring Semester 99. byGeoffrey C. Fox (Tom Scavo)
When browsing the Web, two pieces of information are considered public: the IP address of the client and the type of browser. All other data are considered private. In particular,
JavaScript does not permit access to the client file system
JavaScript can not establish a direct connection to an arbitrary Internet host