Programs like NoScript 12 January 2013 18:29
Programs like NoScript block Java, Flash, and Java Script for all
sites except those the user adds to a white list. If everyone ran
these tools or if they came installed by default in browsers it would
probably make drive by attacks less common.
As add-ons are required to fully use some sites, disabling any add-on
with a security hole seems unlikely for most users. Learning to
control which sites you allow to use the add-ons seems more likely.