[rotuts]

a few days ago Google warned me I might be visiting a malware site

I asked about this and both Java and java-script came up

using Safari I can block java-script but my Gmail does not load

If I block java gmail loads

so Im blocking java, realizing ive forgotten what little I know about both of these items.

do I gain any security by blocking java?

also there does not seem to be an ad-on for Safari like NoScript for Firefox

many thanks

[Cold Warrior]

This isn't strictly OS X so I've moved it to Applications. Various apps use Java and JS, so this section is a better fit for your questions.

[TETENAL]

You gain a little bit of security by blocking both. Java on the web is pretty much insignificant for consumers today, but you will lose a lot of functionality of modern web sites by turning off JavaScript Turning off the latter one is therefore not an option. Keep everything up to to date and you are usually safe.

Most of the malware doesn't rely on exploits of software bugs anyway, but on social engineering. Don't be tricked into installing something from an untrusted source. That's the most important thing to take care of.

[rotuts]

Many thanks!

[Chuckit]

Javascript is not a major attack vector for Safari as far as I know. At worst it's really annoying. Most of the Safari exploits I've heard of involved Java or just plain bugs in OS X (like the evil image exploit).

BTW, despite the similar names, Java and Javascript have almost nothing to do with each other.