Ah yes, AES implemented in javascript and dropped in a page via bookmarklet. What could possibly go wrong?