I would counter the NoScript suggestion and just use uBlock Origin's JS blocker. You can default all sites to off, and then enable it on sites you wish to grant permission to run arbitrary code in your web browser. You can do a lot more than that with uBlock Origin, too.
ooh ill have to check that out, didnt know that existed
edit: only downside of Ublock is that its a blanket block on all javascript for the website. i watch sports streams and will unblock the URLS i need to view it with NoScript and noscript gives a nice list of what can be blocked.
i would suggest going one step further and also using NoScript in Firefox, but it does make you mark sites as trustworthy.
I would counter the NoScript suggestion and just use uBlock Origin's JS blocker. You can default all sites to off, and then enable it on sites you wish to grant permission to run arbitrary code in your web browser. You can do a lot more than that with uBlock Origin, too.
ooh ill have to check that out, didnt know that existed
edit: only downside of Ublock is that its a blanket block on all javascript for the website. i watch sports streams and will unblock the URLS i need to view it with NoScript and noscript gives a nice list of what can be blocked.
In "Medium Mode" you can set it to allow JS (or not) but block all third party JS/frames. Then you can selectively enable domains per page.
https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode
ohhh ok i see that now. thats pretty awesome, thank you!