First public release of the NoScript add-on for Chrome

Giorgio Maone, creator of the NoScript project, has released the first testable release of the Chrome browser add-on. The assembly corresponds to version 10.6.1 for Firefox and became possible due to the translation of the NoScript 10 branch to WebExtension technology. The Chrome release is in beta and is available for download from the Chrome Web Store. At the end of June, NoScript 11 is planned to be released, which will be the first release with stable support for Chrome/Chromium.

An add-on designed to block dangerous and unwanted JavaScript code, as well as various types of attacks (XSS, DNS Rebinding, CSRF, Clickjacking), is used as part of Tor Browser and many distributions focused on privacy. It is noted that the appearance of a version for Chrome is an important stage in the development of the project - the code base is now unified and can be used to generate assemblies for both Firefox and browsers based on the Chromium engine.

Of the differences in the test version of NoScript for Chrome, the disabling of the XSS filter, which is used to block cross-site scripting and substitute third-party JavaScript code, stands out. Before bringing this feature to its proper form, users will have to rely on Chrome's built-in "XSS Auditor", which is not as effective as NoScript's "Injection Checker". The XSS filter cannot yet be ported, as it requires asynchronous request processing to work. At one time, when switching to WebExtension, Mozilla developers implemented in this API some advanced features necessary for NoScript, such as asynchronous handlers, which Google has not yet ported to Chrome.

Source: opennet.ru

Add a comment