Having used noscript for a while, I've gotten into the habit of letting it block everything at first and only allowing what seems necessary for that site.

I'm perfectly okay with the 'broken until enabled' model... I used to use "Request Policy" in Firefox - the most granular control of script and XSS accesses I've ever seen. Miss it in Chrome.