Router - to whitelist or not?

[RouterNovice]

The router here needs JS for its web ui menus. Until now, I've whitelisted it.
With the recent publicity given to various holes in router modules etc, including on your own blog, is it possible for these scripting capabilities in the router to be subverted for other than UI operation - say if a router is getting run remotely after being hacked?
I am probably answering my own question but what would I know? Would it be wiser to only allow JS on-the-fly when accessing the router via its web interface?
thanks in advance for advice and for NoScript/ABE, which rocks

[therube]

I Temporarily Allow my router when I need to access it.
Otherwise, it is blocked.

[Giorgio Maone]

As long as ABE and its SYSTEM rules are enabled, there's no risk in keeping JS enabled in your router -- aside malicious firmware updates, but at that point you'd have a much bigger problem -- because any cross-site attack from an internet web page gets blocked by ABE.