Anyway it's not about you browser... In other words, i confess - i don't like JavaScript anyway ;-) and IMHO the best solution to prevent such attacks is to completly turn the JavaScript off (or use a browser that doesn't support it)!
Trying to secure servers, making them refuse to accept such input is ok, but it reminds me the way the viruses evoluated - some people were trying to secure the software, while the others tried to walk around that security improvements. And what to say... it happens all the time!
Besides there is another problem - if something has beed invented and people were told that tit was invented for them, then how to explain your *customer* (or even any of your users) that they can't use it right here - at this site, becouse somebody used it wrong way... Will (s)he understand?! I'm afraid - no :-(
BTW (Off-Topic). A few days ago i've got almost killed by a genius 'WebMASTER' who told his customer "... it won't look god in red... besides there is no red color in the Internet". ROTFL ;-)