One other thing, browsers may allow you to execute JavaScript via some mechanism (eg typing it in to the address bar encoded as a javascript: URL), if so, that might be another vector for controlling the browser.
One other thing, browsers may allow you to execute JavaScript via some mechanism (eg typing it in to the address bar encoded as a javascript: URL), if so, that might be another vector for controlling the browser.