Oh, I get it. Well, the issue is visiting a malicious website in the first place. Nobody will waste time to fool around with your cursor when they can convince to run a java applet or download innocent looking malware. At least that's the way I see it.
Are you sure you have to actually visit a baddie?
That's the point, you don't, it may be any site you visit where you allow scripts through noscript, or have no noscript protection or turn on java through about:config which is default.
Now, just think about all the people that have no idea about this exploit that is running a basic browser without any protection, example: your facebook casual user <lol.
I installed comodo dragon, happens to chrome based browsers as well.
The real whole point of this is.
over@
http://forum.palemoon.org/viewtopic.php?p=8299#p8299 explains where you may disable websites can't remove stuff, giving you power over your browser.
Why in the hell is there not a setting to stop websites from controlling your cursor? If there are other setting to stop websites controlling other parts of your browser.
http://forum.palemoon.org/viewtopic.php?p=8299#p8299 javascriptIt's stupid not to have this kind of setting.
Edit:
So the question remains, can mozilla or google or any web browser developer be able to add a setting to block this kind of behavior??? And if not, why not?