Firefox and NoScript
Honestly, I have no idea why more browsers don't have script blockers like NoScript built into them. The web and Internet are so toxic, it's just pathetic. Turn off the capability to run scripts, and suddenly so many vulnerabilities just disappear.
Wanna build a botnet? Just buy some ad space, sit back and relax.