I entered a bug in Bugzilla regarding the Orbitz pop-under: Bug 127555 – DoubleClick pop-under gets past advanced script prefs. Update: whoops, my bug was a dupe. See bug 126224.