It would have stopped it. Js has to be active for the exploit script to run.