Giorgio Maone, the creator of the NoScript project, has released the first testable version of the extension for the Chrome browser. This build corresponds to version 10.6.1 for Firefox and has been made possible by porting the NoScript 10 branch to the WebExtension technology. The Chrome release is in beta and is available for download from the Chrome Web Store. NoScript 11 is expected to be released at the end of June, which will be the first version with stable support for Chrome/Chromium.
The extension, designed to block harmful and unwanted JavaScript code as well as various types of attacks (XSS, DNS Rebinding, CSRF, Clickjacking), is used in the Tor Browser and many privacy-focused distributions. The release of the Chrome version marks an important milestone in the project's development—the codebase is now unified and can be used to create builds for both Firefox and browsers based on the Chromium engine.
One notable difference in the test version of NoScript for Chrome is the disabling of the XSS filter that is used to block cross-site scripting and the injection of third-party JavaScript code. Until this feature is properly implemented, users will have to rely on Chrome's built-in XSS Auditor, which is not as effective as NoScript's Injection Checker. The XSS filter cannot be ported yet, as its functionality requires processing requests asynchronously. During the transition to WebExtension, Mozilla developers implemented some advanced features in this API necessary for NoScript, such as asynchronous handlers, which have not yet been migrated to Chrome by Google.
Source: opennet.ru
