I realize this site has been hit with a number of phishing and link-jacking attacks recently, but you're going about it all the wrong way. This "gateway" system is just a little ridiculous. Honestly, were it closer to April 1 I'd be having a good laugh about it, but come on. Really?

Ok, so let me tell you how it goes:

First, 75-80% of deviants will have absolutely no idea what good it does, other than that it annoys them greatly.

Second, even after learning its purpose, after one or two uses those same deviants will just click the "continue" button without paying any attention to what it says or what it's there for. Rendering it useless and amplifying annoyance noted in the first point.

And Third, the ones that get really fed up will just install this userscript (or some variant thereof) making the whole system altogether moot.

Give us a little credit. I've been around the block a few times (hell, I could argue I've built my fair share of 'em), so I think I'm capable of determining whether or not that link I'm about to click is really something I want to click. If the link looks trustworthy, I'll click the Continue button 100% of the time because I made up my mind before I clicked the link in the first place. If the link doesn't look trustworthy, I wouldn't have clicked the link in the first place. And if it's a tinyurl link, the final destination is obscured and the gateway does no good whatsoever.

Let me turn it off.

And if this is just a temporary measure while you brick up the hole in your XSS security, fine, but a little warning next time, eh?

I whipped up a variant that I think should illustrate an alternative. A compromise, if you will: [link]