Are you thinking of NoScript? That's what gives me the XSS popups.

uBlock prevents XSS? I didn't know that.

It doesn't matter if they are directly stealing cookies though.