I just keep Javascript turned off except for sites I whitelist. Nobody ever believes how easy and unobtrusive this is, despite browsing a pretty huge and diverse set of domains.

This has gotten a little more difficult since chrome changed the UI around these settings though.