Sakin Farko na jama'a na NoScript add-on don Chrome

Giorgio Maone, mahaliccin aikin NoScript, ya gabatar da sakin farko na add-on don mai binciken Chrome, akwai don gwaji. Ginin ya yi daidai da sigar 10.6.1 don Firefox kuma an sami damar yin godiya ga canja wurin reshen NoScript 10 zuwa fasahar WebExtension. Sakin Chrome yana cikin matsayin beta kuma ana samunsa don saukewa daga Shagon Yanar Gizon Chrome. An shirya fitar da NoScript 11 a karshen watan Yuni, wanda zai zama farkon saki tare da tsayayyen tallafi ga Chrome/Chromium.

Ƙara-kan da aka ƙera don toshe lambar JavaScript mai haɗari da maras so, da nau'ikan hare-hare iri-iri (XSS, DNS Rebinding, CSRF, Clickjacking), ana amfani da shi azaman ɓangare na Tor Browser da yawancin rarrabawar sirri. An lura cewa bayyanar sigar Chrome wani muhimmin mataki ne a cikin ci gaban aikin - tushen lambar yanzu an haɗa shi kuma ana iya amfani da shi don ƙirƙirar taruka don duka Firefox da masu bincike bisa injin Chromium.

Ɗaya daga cikin bambance-bambance a cikin nau'in gwajin NoScript don Chrome shine kashe tace XSS da aka yi amfani da shi don toshe rubutun rukunin yanar gizo da musanya lambar JavaScript ta ɓangare na uku. Har sai wannan fasalin ya ƙare kuma yana aiki, masu amfani za su dogara da ginanniyar XSS Auditor na Chrome, wanda ba shi da tasiri kamar Mai duba Injection na NoScript. Ba za a iya fitar da tacewar XSS ba tukuna saboda tana buƙatar sarrafa buƙatun asynchronous don yin aiki. A wani lokaci, lokacin ƙaura zuwa WebExtension, masu haɓaka Mozilla sun aiwatar da su a cikin wannan API wasu abubuwan ci gaba waɗanda suka wajaba don NoScript, kamar masu sarrafa asynchronous, waɗanda Google bai riga ya canza shi zuwa Chrome ba.

source: budenet.ru

Add a comment