I use both the addon NoScript and the blogging platform Tumblr. In order to customise your blog's theme in Tumblr, it goes to [http://www.tumblr.com/customize] where it displays a live preview of the blog and any modifications made to the theme. Since NoScript prevents XSS, it sort of breaks the ability to modify one's theme in Tumblr, unless you click the "Unsafe Reload" function.

How can i set up a Anti-XSS Exception Protection in NoScript so that it safely disables XSS protection just for tumblr.com/customize? I've tried

but that doesn't seem to work.

1 Answer 1


This took me a while to figure out. The exception I ended up going with is:


Might not be the safest solution but it's the only one I could find that actually worked.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .