Sakin Farko na jama'a na NoScript add-on don Chrome

Giorgio Maone, mahaliccin aikin NoScript, gabatar Sakin farko na abin ƙara don mai binciken Chrome yana nan don gwaji. Ginin ya yi daidai da sigar 10.6.1 don Firefox kuma an sami damar yin godiya ga canja wurin reshen NoScript 10 zuwa fasahar WebExtension. Sakin Chrome yana cikin matsayin beta kuma akwai don saukewa daga Shagon Yanar Gizo na Chrome. An shirya fitar da NoScript 11 a karshen watan Yuni, wanda zai zama farkon saki tare da ingantaccen tallafi ga Chrome/Chromium.

Ƙarar da aka ƙera don toshe lambar JavaScript mai haɗari da maras so, da nau'ikan hare-hare iri-iri (XSS, Sabunta DNS, Farashin CSRF, Dannawa), wanda aka yi amfani da shi azaman ɓangare na Tor Browser da yawancin rarrabawar sirri. An lura cewa bayyanar sigar don Chrome wani muhimmin mataki ne a cikin ci gaban aikin - tushe code yanzu yana haɗe kuma ana iya amfani dashi don ƙirƙirar taruka don Firefox da masu bincike bisa injin Chromium.

Ɗaya daga cikin bambance-bambance a cikin nau'in gwajin NoScript don Chrome shine kashe tace XSS da aka yi amfani da shi don toshe rubutun rukunin yanar gizo da musanya lambar JavaScript ta ɓangare na uku. Har sai wannan fasalin ya ƙare kuma yana aiki, masu amfani za su dogara da ginanniyar XSS Auditor na Chrome, wanda ba shi da tasiri kamar Mai duba Injection na NoScript. Ba za a iya fitar da tacewar XSS ba tukuna saboda tana buƙatar sarrafa buƙatun asynchronous don yin aiki. A wani lokaci, lokacin ƙaura zuwa WebExtension, masu haɓaka Mozilla sun aiwatar da su a cikin wannan API wasu abubuwan ci gaba waɗanda suka wajaba don NoScript, kamar masu sarrafa asynchronous, waɗanda Google bai riga ya canza shi zuwa Chrome ba.

source: budenet.ru