I had to give up doing this. I couldn't manage all of the different times websites broke over just CDNs. Lord help me if the website is Ad driven.

I encourage every web developer to try running NoScript for a week. You will find it enlightening.

If you're already using uBlock Origin you can disable JS per site (or by default, like NoScript). I've found that the UI is way easier to understand compared to NoScript.

uMatrix is similarly excellent (finer grained control I think is the difference).

For frequently visited sites you can save which bits you want to allow so its not as onerous as you'd think.

Blocks Google Analytics and Facebook's poison by default.

I'm not sure what you would gain from disabling things like the ability to upload multiple files, autocomplete fields and rich text editing. Raging against and disabling Javascript is just stupid in my viewpoint. I'm not going to cut out absolutely essential features just to satisfy some fringe group.

What if JS over gemini:// would only be able to render some things and would not have network access? It just is a question of what your html renderer allows. Add Lua if you think that's better! But you will have the same problems if embedded Lua can do network stuff.

...or let's just P2P our Emacsens... the last non divisive browser... :-P

gemini doesn't at the moment have any formalized systems for client-side scripting, effectively eliminating the need for that, and most of the gemini community seems pretty opposed to ever implementing such a thing, so it doesn't seem like that will ever change.