Well, this whole topic has been beaten to death, so I will attempt to minimize my contribution.
Apple’s Security Update 2004-05-24 eliminates the need for my Help Viewer hack (see below). However it doesn’t close all of the URI scheme holes.
For details on that topic I’ll send you over to John Gruber at Daring Fireball.
Right! Now back to our regular scheduled programming..