Switch off javascript in myfaces

In web.xml setup a context-param section and setup parameter name:

<context-param>
  <param-name>org.apache.myfaces.ALLOW_JAVASCRIPT</param-name>
  <param-value>false</param-value>
</context-param>