just one thing, the script shield seems indeed to scan properly as I browse in Firefox, but it always ends up re-scanning lastpass.js ... wouldn't mind excluding it but as you know there's no settings for the script shield, and no *.ini file that I can find. And actually may be it's better to get lp scanned each time? yes? no? ... on a side note, does the script shield protect against CSS? thx.