Well, currently switching off JS entirely is the single best way to block abusive web site behaviors, but there's obviously room for improvement. There are vali

Well, currently switching off JS entirely is the single best way to block abusive web site behaviors, but there's obviously room for improvement. There are valid use cases for ordinary websites (as opposed to full-featured web apps) to use JavaScript, but that shouldn't by default extend to sensor APIs, messing with scrolling behavior, using unrestricted CPU time, or loading third-party scripts.