JS and the "safest" option : Tor | Torhoo darknet markets

You would be best off manually disabling javascript as opposed to depending upon an addon to block javascript for you. In using an addon, or relying upon the security slider to disable javascript you allow the potential for the failure of something within your control. You should be working to reduce the potential for failure in all of your methodlogy, alongside that work to reduce the potential that damage resulting from failure could have upon you. You can easily disable javascript in about:config as people have already mentioned. People forgot to mention disabling pdfjs, set pdfjs.disabled to true. You can also make a basic program file designed to keep javascript disabled for Tor Browser. It has the effect of preserving the existence of those settings changes throughout updates, some Tor Browser updates can nullify changes made in about:config. While you're at it you may as well disable webgl, webgl.disabled = true. WebGL can be exploited against browsers, and I believe it can leak hardware information.