javascript.enabled is in about:config . I set it to false most of the time.
Why ?
Because javascript is way too powerful to leave on when visiting random web sites or sites with third party ads. It greatly increases the attack surface of a web browser both for compromizes and for privacy violations.