656433 – Disallow javascript: and data: URLs entered into the location bar from inheriting the principal of the currently-loaded page

Implications for bookmarklets / mucking around on a page from javascript: in the URL bar?