1. A method to protect web users from malicious executable code comprising: intercepting at a proxy engine, a communication from a web browser intended for a script engine; invoking one or more event handlers enrolled as extension platforms for the proxy engine; determining, by a processor coupled to a memory, by the one or more event handlers, if the communication includes a script that occurs in a script-free zone of the communication, wherein the script-free zone is defined by opening and closing markup languages tags, between which script content is not allowed by the script engine, the opening markup language tag is assigned to a dynamically-generated identifier and marks the beginning of the script-free zone where script content is not allowed and the closing markup language tag is assigned to the same dynamically-generated identifier and marks the end of the script-free zone where script content is not allowed; and cancelling an event associated with the communication, if the one or more event handlers determine that script occurs in the script-free zone.