So....it blocks everything except what you allow.
Which is exactly what I described in my instructions for IE.
Nothing different there.
Nothing? In Mozilla, you check one box and forget it.
Your procedure involves turning off all scripting, then turning scripting back on for 'trusted sites' one at a time. And by the way, if I have turned off all scripting, and visit a site which works better WITH scripting, how would I know?
There is a big difference: the Mozilla solution is elegant, the Microsoft solution is cumbersome and ass-backwards.