just to add that of course I’ve been thinking of the script shield, but first it doesn’t work with Chromium, and second I never heard that it had anti-XSS abilities.