If NoScript is set to "Allow scripts globally" does this setting negate the protection NoScript offers from XSS "cross site scripting" or would that protection still be in place? I find that having to check allow for scripting on every site I might choose to visit is a hassle but I would like to know that the sites I choose to trust and visit are safe(r) from potential cross site scripting by using the XSS protection in NoScript. I looked through what info I could find concerning NoScript use but never found an answer to my question. Of course I am sure most users of NoScript don't want to turn off it's main functionality like that anyway. Also I guess I should ask...do you think the XSS protection in NoScript is even an effective addition to online security? Thanks.