We don’t get to put in js code because there’s a whole bunch of us and policing it would be a nightmare. FB isn’t actually inserting js code, JimRob is including FB’s js code. There’s a very important difference.
It pretty easy to monitor. As you yourself demonstrated, any web browser that will let you view the source will give you the js link to FB’s code, click on that and walla. Also this kind of thing get’s around, if FB changes that link code in a nefarious way the internet WILL notice and WILL complain, like every other time FB has tweaked things in an annoying way. And most of those times FReepers post those stories, so JimRob doesn’t even need to monitor FB’s js code, he can just pay attention to his own board and see if there’s a story about FB changing the code.
There’s no reason for FB to treat FR traffic any differently than TMZ. Links is links and FB knows that the more places that link into them the more of a hub they become and the more they get “sticky eyes” (people staying on the site longer) and the more views their ads get and the more money those advertisers pay. It’s in FB’s best interest to treat all link-ins equally. And if there’s one thing the people at FB have shown a fondness for it’s their own best interest.
FR was broke actually. There’s a large and massive social networking world out there with hundreds of millions of users (FB reports 500 million all by themselves). And a lot of what they’re doing is the kind of news story distribution we do here on FR. FR was isolated from all that and risked losing pertinence. You can tell by how long the fund raiser took that FR is not quite the power house it once was. A bit of new blood and improved visibility could help that. They were playing with RSS feeds not that long ago, they should add tweet and digg capabilities. Gotta stay modern, the internet is no place to go Luddite.
And if it really bugs you that much disable java. Walla, all gone.
That would be true if the simple looking link was "web 1.0."
But since the FB server gives back a dynamically generated script, that can be tailored by referring link, time, requestor IP, etc, then the same old simple link from JimRob simply gives them a hook to do whatever with whomever.