Hhmm, I had a nice long answer to this written the other day.....I must have forgotten to post it.....
In the DEFAULT setting (_none_ of the boxes ticked!), NS blocks everything, just as expected.
Well so far, I've only found 2 boxes to check -- allow all scripts (dangerous) and Sanitize XSS requests. I honestly can't remember whether I checked Sanitize XSS requests, or if it was already checked for me, when I first started the new Firefox (quantum).
Of course, I could uncheck Sanitize XSS, but wouldn't that mean they aren't being blocked at all? I want to block them silently, without a big notification where I have to check a box to get it out of the way.
No idea why this XSS warning would pop up with your settings on every single page as you seem to be suggesting.
No, not every page, every site.
So they were ALL set to DEFAULT, and I made sure (and still do so from time to time, since it happened _once_ to me that somehow the MEDIA box got ticked in the DEFAULT settings with me not intending it or doing it knowingly) that in this DEFAULT zone, none of the boxes were ticked!
I did the same thing. I deleted all the presets, and started fresh.
But I don't know what Media box you are talking about. I don't see anything labelled Media. What is that?
OK, that's my way of doing it, I am sure there are other ways, but I just wanted to tell you that NS works really well once you got the right settings and understand how to do so that it fits your individual needs.
Well in my opinion, the new NS is not intuitive and it takes WAY too much fumbling around and trying to learn by trial and error, what the settings are and what they do. I still haven't figure out a lot of it!
For example, it was happening many, many times for me, that I would click the toolbar icon to open the little menu (not Options), I would click for Temporary Permissions on individual domains (which by the way, now takes 2 clicks, instead of just one -- intuitive would be 1 click for temporary, and 2 clicks for trusted, but no, it's the other way around). Anyway I would set for trusted or temporary, and right before my eyes, it would reset itself to Default. No matter how many times I would set it for either Trusted or Temporarily Trusted, it would reset to Default. The only way I could get scripts working for a lot of sites, was to click the button for Temporarily Allow All.
That might seem to solve the problem, except for almost every website on the face of the web uses doubleclick.net advertising, and allowing all scripts allows those, and other advertising scripts! So now I have ads all over the place.
And then there were times when the Temporary Permission would not be revoked. I would click and click (either Revoke or Default) and they did not go back to default. It should not be surprising that these things were happening, due to the program not being intuitive and easy to use, and users having to click every button in site to try and make things work. So then I started using Untrusted, to get rid of those that would not revoke. But then that gets to be a problem the next time I visit the site and I have to un-Untrust them.
From an aesthetic point of view, can't we just have 4 or 5 individual buttons: Default, Trusted, Temporarily Trusted, Untrusted ? Instead of something that looks like a slidebar but works like buttons. It's like the program needs to make up it's mind whether it wants one or the other. And if it's buttons, make them separate and easy to understand at a glance.
Hope this helps! BTW, I guess it's your postings in the InkScape Forum that helped me a lot some time ago, so I felt I have to try to help you this time
Oh, that's very sweet! Thank you for trying to help. I really appreciate that you spoke up!
After the first couple of days with the quantum Firefox, and honestly, it was the difficulty with NS which pushed me over the line. If not for these problems, I probably could have found enough patience to figure out how to replace the 8 or 9 addons which were permanently removed, and keep using Firefox. But I felt like I was going to have to spend so much time re-learning Firefox (and plus, I often had the experience of Ff updates breaking this addon or that, and I was having to stop and deal with that about every 2nd update). So I decided it was time to move on. Now I'm set up with SeaMonkey, which is essentially like using older versions of Firefox, which I'm fine with. I've found replacements for the vast majority of my Ff addons, and perhaps best of all, it uses an older version of NS, which actually works like before quantum57..
Have you tried enabling the XSS blocking? If you try it, you'll see those oversized notifications on every site, and I'm sure you'll quickly become annoyed.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.1