Java vs ActiveX vs jScript vs vScript

Any opinions of the pros/cons of the above approaches for performance and security?

I am developing a large website and have a lot of reusable code. Currently I have the reused code in jScript and vbScript in text files and include it with a scr= tag.

I am considering moving the logic to either an applet (I'm familiar with Java) or an activeX (I've never written any activeX) for security. There won't be any graphics, just business logic functions.

I'va always been told that Java works in the socalled "sand box". This approach should be more secure than the Windows approach. Just take a look at all the virus attacks on Windows and you get an idea of how safe the MS approach really is.
But I've also been told that Java isn't too performant. You don't really compile Java, you translate it to bytecode and the JVM interprets the .class files.
One more thing about security : I wonder whether you can look at the source code of your VBscript files if you include then in HTML. With a java applet you're sure no one is able the see the source code.

That said, I'd move to Java. And frankly, I'd even consider moving the website to a full blown website using JSP's and servlets. Then you're sure you can host your website on any computer, regardless of the OS.

If you want more information about servlets and JSP's, just give me a sign.