Why wouldn't you use the NoScript extension? Not only does it give you fine grain control over JS but it adds additional security monitoring, such as click jacking.