Noscript (Firefox extension)

Noscript is a Firefox extension that stops Javascript (a major target for security flaws) from running without permission, blocking exploits such as click jacking and XSS; white listing feature lets the user select named sites that can run scripts. Can be a bit intrusive but worth it for the security-conscious.