Latest XSS cross-site fix

[jackrungh]

I just wanted to thank the developers for being so prompt in addressing issues. The recent problem with incorrect blocking of cross-site XSS stopped me in my tracks. I'm a unix sysadmin and the HP bladesystem onboard administrator gui would not function at all unless noscript was either disabled, or if scripts globally were allowed + unchecking "block every object coming from a site marked as untrusted." With the recent fixes it works like a dream. Many thanks and apologies for the anon support forum post, if that is uncool in these parts.

[Thrawn]

I'm sure you're welcome, but the only developer is Giorgio . And I'm sure he's fine with anonymous thanks, too (although anonymous donations are even better ).