I might have made a topic on this before, but I'll share again the best security add-on for Firefox that I've ever encountered. It's a tool that blocks all JavaScript, Java, Flash, etc... (short of your white-list), protects against XSS and clickjacking attacks, and most of all is extremely intuitive to use.
Just throwing it out there in-case anyone was unaware it existed.