Giorgio Maone, creator of the NoScript project, has introduced the first available test release of the extension for the Chrome browser. This build corresponds to version 10.6.1 for Firefox and has been made possible by migrating the NoScript 10 branch to the WebExtension technology. The Chrome release is in beta and is available for download from the Chrome Web Store. A stable release of NoScript 11 is expected at the end of June, which will be the first release with stable support for Chrome/Chromium.
The extension, designed to block dangerous and unwanted JavaScript code as well as various types of attacks (XSS, DNS Rebinding, CSRF, Clickjacking), is used in the Tor Browser and many privacy-focused distributions. The emergence of a version for Chrome is noted as a significant milestone in the project's development — the codebase is now unified and can be used to create builds for both Firefox and browsers based on the Chromium engine.
Among the differences in the test version of NoScript for Chrome is the disabling of the XSS filter that is used to block cross-site scripting and the injection of third-party JavaScript code. Until this feature is properly implemented, users will have to rely on Chrome's built-in 'XSS Auditor,' which is not as effective as NoScript's 'Injection Checker.' The XSS filter cannot be ported yet, as its functioning requires request handling in an asynchronous mode. In the past, when transitioning to WebExtension, Mozilla developers implemented some necessary advanced features for NoScript in this API, such as asynchronous handlers, which Google has not yet integrated into Chrome.
Sursa: opennet.ro
