Firefox now has self-XSS protection to the browser console...

... but at about the same time another way to paste script was added.
Put this on the clipboard:
... then press Shift-F2 and paste it.
It obeys CSP rules, but it ignores MIME types (try replacing text/javascript with image/jpeg above), so a bypass is likely.
Complaints to @steike