I forgot to reply to the question about forwarding 791467. I discussed it with upstream and they weren't interested in disabling javascript or really investigating the issue at all. As far as they're concerned, the security risk is totally acceptable, which is fair enough.
Note that Vincent uploaded the plowshare-modules package in the meantime, so please ignore that request. Cheers, Carl