that's even better than the about:config option of allowing it just for clicks, not for scripts/iframes/etc. thanks