NoScript block all three: javascript, java and flash. Javascript can be used to deliver/encode/decode exploit payload. Usually the exploit itself is java or fl

NoScript block all three: javascript, java and flash. Javascript can be used to deliver/encode/decode exploit payload. Usually the exploit itself is java or flash. At least, that's what I noticed for the zero day RCE that made it up to the first page of Google.