Using NoScript. I think the only sites I didn’t allow yet were Google Analytics and Facebook. Most sites just don’t work anymore w/out JS.