Google added a section on canonicalization best practices for JavaScript to the JavaScript SEO best practices document.
Live GhostPoster malware campaign hides malicious JavaScript inside Firefox extension logos, infecting over 50,000 unsuspecting users.