Is a browser like Firefox with disabled scripts (for example via a plugin like no-script) and disabled Java enough to be protected against drive-by-malware from the internet.
Of course this does not protect me against careless browsing attitude. For example If I post my credit card informations on a wrong/bad website.
The question is if a browser which works only with HTML (HTML5 too) and Images is secure against malware. So is malware infection only possible via scripts, flash-plugin, Java applets etc. (beside the fact that the browser itself could have bugs/leaks but this is not the point in this question)
Let's say I use a text-only browser like links2 for Linux am I save for malware and is this also true for pure HTML and image active in browser?