Firefox has no XSS mitigation built in unlike Chrome and even Internet Explorer. NoScript provides that for Firefox, even if you allow global scripts for practi

Firefox has no XSS mitigation built in unlike Chrome and even Internet Explorer. NoScript provides that for Firefox, even if you allow global scripts for practicality purposes you're getting XSS protection. And I realise that there are design trade offs, but it seems sad that mobile has to drag the desktop into the realm of relative uselessness - not all add-ons can be updated to use the new abstract API (since the API will have gaps that the old API used to support).