No thanks, just thinking about running 'Norton Anti-JS' (et al) on a server is enough to induce nausea. In other words, blocking 'malicious' code is reactive,

No thanks, just thinking about running 'Norton Anti-JS' (et al) on a server is enough to induce nausea. In other words, blocking 'malicious' code is reactive, not pro-active. Reactive solutions by definition end up solving yesterday's problems while being oblivious to today's - viz. liquids restriction in hand luggage.