Giorgio Maone just announced that NoScript now includes ABE (a framework for CSRF protection) by default. Among others, ABE contains rules which enforce LocalRodeo's intranet protection functionality. Also, Mozilla has apparently finally fixed Firefox's DNS rebinding issues with the release of 3.5 (at least Kanatoko's testcase fails now). Hence, if you are already a NoScript user, there should currently be no need for additionally installing LocalRodeo.