noscript is a waste of time - it's well known the FH exploit bypassed it.