that's not the xss filter
to disable that protection: about:config -> toggle noscript.inclusionTypeChecking ?
you can "fix" that specific site by adding
to noscript.inclusionTypeChecking.exceptions (i'm assuming you know the implications of doing that and why fix is in quotes
)
and a quick test with 0.0.0.0 indicates that disable xss does not require browser restart
to disable that protection: about:config -> toggle noscript.inclusionTypeChecking ?
you can "fix" that specific site by adding
- https://cogprogramming.googlecode.com/files/
to noscript.inclusionTypeChecking.exceptions (i'm assuming you know the implications of doing that and why fix is in quotes

and a quick test with 0.0.0.0 indicates that disable xss does not require browser restart