Giorgio Maone, a creator of the NoScript project, has introduced the first test version of the browser extension for Chrome. This build corresponds to version 10.6.1 for Firefox and became possible due to the translation of the NoScript 10 branch to WebExtension technology. The release for Chrome is currently in beta and can be downloaded from the Chrome Web Store. NoScript 11, which will be the first release with stable support for Chrome/Chromium, is scheduled for release at the end of June.
The extension, designed to block dangerous and unwanted JavaScript code, as well as various types of attacks (XSS, DNS Rebinding, CSRF, Clickjacking), is used in the Tor Browser and many distributions focused on privacy. The introduction of the version for Chrome marks an important milestone in the project's development—the codebase is now unified and can be used to build versions for both Firefox and browsers based on the Chromium engine.
Among the differences in the test version of NoScript for Chrome is the disabling of the XSS filter used to block cross-site scripting and the injection of third-party JavaScript code. Until this capability is fully developed, users will have to rely on Chrome's built-in 'XSS Auditor', which is not as effective as NoScript's 'Injection Checker'. The XSS filter cannot yet be ported because it requires request handling in an asynchronous mode. During the transition to WebExtension, Mozilla developers implemented some necessary advanced capabilities in this API for NoScript, such as asynchronous handlers, which Google has not yet ported to Chrome.
Forrás: opennet.ru
