Hacker News new | ask | show | jobs
by user5994461 3232 days ago
NoScript block all three: javascript, java and flash.

Javascript can be used to deliver/encode/decode exploit payload. Usually the exploit itself is java or flash.

At least, that's what I noticed for the zero day RCE that made it up to the first page of Google.