Javascript crypto does not work. The server can the manipulate the JS to send back the text, so it could be server side in first place. And serverside crypto is worse than useless.
The problem is of course not specifiy to javascript. It should be "fat client crypto does not work".