Friendly reminder to disable Javascript, at the very least, by default.
Only run Javascript on domains you really need and trust, and even then the minimum amount required for the site to function.
Only run Javascript on domains you really need and trust, and even then the minimum amount required for the site to function.
This is so inconvenient that practically no one is going to do it. I used to use NoScript but found I was just constantly clicking "temporarily allow."