Sorry Guys

[lonesometwin]

I know you work really hard on this and I've used it ever since I first fired up the fox. But as a user, all NS does for me is make my life difficult. There is virtually no site where that annoying status line comes up, so you just take it for granted. There are interminable updates which have been known to wipe out my whitelist. I'd like the facility to store my whitelist in the 'clouds', so relieving me of this hassle at least. Mostly tho, as with online banking, it can be so secure that it's virtually unuseable, how many times have YOU sat clicking a button before the light dawns and you go back down to NS to play Guess the Allow?!

Since I never go to games related or torrent sites I never feel too threatened anyhow, so I"m turning the whole thing off.

[dhouwn]

I have the notification bar deactivated and in all that time I've been using NoScript I can't remember that my whitelist ever got reset.

And concerning guessing if a site malicious, try middle clicking on the domain in the NoScript menu.

[Giorgio Maone]

There is virtually no site where that annoying status line comes up

You can turn it off from the Appearance menu. BTW, on Firefox Mobile it's turned off by default.

There are interminable updates which have been known to wipe out my whitelist.

Updates should never wipe out any preference, nor the whitelist.
If they do, there's something else broken in your profile and you may need http://kb.mozillazine.org/Transferring_ ... ew_profile

I'd like the facility to store my whitelist in the 'clouds', so relieving me of this hassle at least.

You can already do it using Weave, but again it shouldn't be wiped out on first instance, and you should investigate what's going on...

[lonesometwin]

Well the XSS thing has just stopped me registering a card on a legit site. There's the problem, it cant really distinguish good sites from bad (how could it?) so it just enforces an overall paranoia on everything. Although it's nice to give the finger to google and doubleclick etc, it's just not worth the overall bother. How about a post-op option, where it just lets everything thru then asks if it was all ok when you leave the page. If yes, then the whitelist is updated accordingly. A reasonable compromise I feel, for those of us who don't think that there's Feds or 914-ers round very corner.

[Giorgio Maone]

How about a post-op option, where it just lets everything thru then asks if it was all ok when you leave the page

A "Learning mode" command applying to the current session until you say "enough" (with a reminder every 3 minutes or so) is actually planned.
Regarding the XSS thing, is that reproducible?
If it is, could you show me the [NoScript XSS] lines from your Tools|Error Console "messages" section?
Anyway, if you're sure it's a XSS false positive and the request is legit, you can work-around using Options|Unsafe reload