First public release of the NoScript add-on for Chrome

Giorgio Maone, project creator NoScript, presented The first release of an add-on for the Chrome browser available for testing. The build corresponds to version 10.6.1 for Firefox and was made possible thanks to the transfer of the NoScript 10 branch to WebExtension technology. The Chrome release is in beta status and available to download from the Chrome Web Store. NoScript 11 is planned to be released at the end of June, which will be the first release with stable support for Chrome/Chromium.

An add-on designed to block dangerous and unwanted JavaScript code, as well as various types of attacks (XSS, DNS Rebinding, CSRF, Clickjacking), used as part of the Tor Browser and many privacy-oriented distributions. It is noted that the appearance of the version for Chrome is an important stage in the development of the project - code base is now unified and can be used to create assemblies for both Firefox and browsers based on the Chromium engine.

Of the differences in the test version of NoScript for Chrome, the disabling of the XSS filter, which is used to block cross-site scripting and substitute third-party JavaScript code, stands out. Before bringing this feature to its proper form, users will have to rely on Chrome's built-in "XSS Auditor", which is not as effective as NoScript's "Injection Checker". The XSS filter cannot yet be ported, as it requires asynchronous request processing to work. At one time, when switching to WebExtension, Mozilla developers implemented in this API some advanced features necessary for NoScript, such as asynchronous handlers, which Google has not yet ported to Chrome.

Source: opennet.ru

Add a comment