The nice thing about the Tor Browser Bundle is that it comes with NoScript, which is preconfigured to block Flash and Java even when disabled.