Just use NoScript. [you should have been using it for a long time now anyway...]