librejs is enabled by default, and it blocks nontrivial js by default if it's not clearly marked as free software. it helps you audit and whitelist scripts you accept running on your computer. but most of the web has become toxic and dependent on installing and running hostile software on useds' browsers