Just kill ALL code in a browser.
The way things are going in this arena recently the only sane thing you can do now is to disable anything that is capable of running code in a browser.
I said goodbye to Java and Flash years ago, now time to say goodbye permanently to Javascript and never let web assembly anywhere near my browser when that tries to become flavour of the day.
Biting the hand that feeds IT
