Use uBlock Origin and add custom filters to block scripts on http:// ; e.g.

    http://$inline-script,domain=~localhost
    http://$script,domain=~localhost