I'm basically trying to run some javascript that will help me locate my lost/stolen Kindle Fire (html5 geolocation based on wifi access points, then an ajax request to a hosted PHP which sends me an email).
It all boils down to, if someone was to open a document that I send to it, which contains javascript – will the javascript execute, or will it just fail?
Amazon provides no way to locate a lost device via GPS or other means so I am trying this. Anyone have experience trying to do something like this? I wish I had another device to test on but I don't. The security implications of this exploit are kind of interesting — if it's even possible — although Kindle does expect any emailed documents to come from an email that is in a 'trusted' list managed through your amazon account.
If you mean a document like you'd send a word doc or book over to read, no, JS wouldn't run like that.