They use the same javascript engine as my browser so I'm not that worried :) . Chances are low compared to just surfing in general in my estimation. Everything is sandboxed quite well in modern browsers.