Is there a way for me (non-expert in javascriptJavaScript) to detect javascriptJavaScript attacks from a website. I have done alota lot of searching around and have not come up with a definitive answer. NoScript is a pain in the ass to use as more and more sites REQUIRE Java and scripting to be enabled (e.g. signing into this site). Every time I click on "allow site" I wonder what I'm "allowing." Also the advice, "Only allow sites you trust" is not really helpful as many sites have been hacked and don't even know it.
Also, I suspect a site running something to pick up my router IP as they seem to be able to identify me although I'm on TOR. I am not referring to a hidden site or one dealing in illegal content. I am talking about normal, known sites.