NoScript Security Suite

Winner of the "PC World World Class Award", this tool gives you with the best available protection on the web.

It allows JavaScript, Java and other executable content to run only from trusted domains of your choice, e.g. your home-banking web site, guarding your "trust boundaries" against cross-site scripting attacks (XSS), cross-zone DNS rebinding / CSRF attacks (router hacking), and Clickjacking attempts, thanks to its unique ClearClick technology. It also implements the DoNotTrack tracking opt-out proposal by default, see https://hackademix.net/2010/12/28/x-do-not-track-support-in-noscript/.

Such a preemptive approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality...

Experts do agree: Firefox is really safer with NoScript ;-)

FAQ: http://noscript.net/faq
Forum: http://noscript.net/forum