>The difference between the local page and the page pulled from the web server is profound (not "weird") from a security standpoint: the latter is going to fail a same-origin check.
>
>Reading this discussion might help:
>
>http://forums.mozillazine.org/viewtopic.php?t=89350
>
>There is a line in there showing you the config change required, but the general discussion shows why it's not necessarily going to work for deployment.
>
>Here is a general discussion that will help you:
>
>
>http://devedge.netscape.com/library/manuals/2000/javascript/1.3/guide/sec.html
>
>Have you signed your script?

One person told me that he succeeded to have it run ok once he agreed to sign it. For me, I can't even has that ability. It seems there is another setting in that browser to allow that flexibility.

As for the prefs.js, I did also try that. It is also a no go for me as I can't have this dialog to appear to let me confirm that I want to run it.