Stanford Safe Cache and Stanford Safe History
Seemed like some exploit proof of concept similar to this was discussed on /. awhile back that it was bypassing even the mighty NoScript. even with java and javascript turned off! -IIRC
I could be wrong. My memory sucks.
At the time suggestions were made to use the following firefox extensions which seemed to block it.
Stanford SafeHistory
Stanford SafeCache
http://www.safehistory.com
http://www.safecache.com
I can tell you right now your going to have to open them up and edit them a bit to get them to install on the latest firefox they might not even work at all, I use them on an older portable Firefox
Proceed with caution