NoScript

“NoScript for making XSS and malicious code execution from untrusted sites less likely.”