Full threadvicaya·NoScript (even when enabled for destination sites) does detect/filter the XSS attempt though.View on HN