Browsers should block this by default :)

Although www.w3fools.com has softened its stance.