I'd finally like to stop playing this whack-a-mole game and come to a better solution. Meanwhile, we can stop enabling XSS protection given that those experiences seriously risk users abandoning Tor Browser, claiming it is broken, and moving on to a much worse solution for their privacy requirements.