How do I keep students from using javascript to block extensions?