ืขืจืฉื˜ืขืจ ืขืคื ื˜ืœืขืš ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ NoScript ืึทื“ื™ืฉืึทืŸ ืคึฟืึทืจ ืงืจืึธื•ื

Giorgio Maone, ื‘ืืฉืขืคืขืจ ืคื•ืŸ ื“ื™ NoScript ืคึผืจื•ื™ืขืงื˜, ื“ืขืจืœืื ื’ื˜ ื“ื™ ืขืจืฉื˜ืขืจ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืึทื“ื™ืฉืึทืŸ ืคึฟืึทืจ ื“ื™ ืงืจืึธื•ื ื‘ืœืขื˜ืขืจืขืจ, โ€‹โ€‹ื‘ื ื™ืžืฆื ืคึฟืึทืจ ื˜ืขืกื˜ื™ื ื’. ื“ื™ ื‘ื•ื™ืขืŸ ืงืึธืจืึทืกืคึผืึทื ื“ื– ืฆื• ื•ื•ืขืจืกื™ืข 10.6.1 ืคึฟืึทืจ ืคื™ืจืขืคืึธืงืก ืื•ืŸ ืื™ื– ื’ืขื•ื•ืขืŸ ืžืขื’ืœืขืš ื“ืึทื ืง ืฆื• ื“ื™ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคื•ืŸ ื“ื™ NoScript 10 ืฆื•ื•ื™ื™ึทื’ ืฆื• ื•ื•ืขื‘ืขืงืกื˜ืขื ืฉืึทืŸ ื˜ืขื›ื ืึธืœืึธื’ื™ืข. ื“ื™ ืงืจืึธื•ื ืžืขืœื“ื•ื ื’ ืื™ื– ืื™ืŸ ื‘ื™ืชื ืื•ืŸ ื‘ื ื™ืžืฆื ืคึฟืึทืจ ืืจืืคืงืืคื™ืข ืคึฟื•ืŸ ื“ื™ ืงืจืึธื•ื ื•ื•ืขื‘ ืกื˜ืึธืจ. NoScript 11 ืื™ื– ืคึผืœืึทื ื ืขื“ ืฆื• ื–ื™ื™ืŸ ืคืจื™ื™ ืื™ืŸ ื“ื™ ืกื•ืฃ ืคื•ืŸ ื™ื•ื ื™, ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ืžืขืœื“ื•ื ื’ ืžื™ื˜ ืกื˜ืึทื‘ื™ืœ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืงืจืึธื•ื / ืงืจืึธื•ื.

ืึทืŸ ืึทื“ื™ืฉืึทืŸ ื“ื™ื–ื™ื™ื ื“ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื’ืขืคืขืจืœืขืš ืื•ืŸ ืึทื ื•ื•ืึธื ื˜ื™ื“ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืงืึธื“, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืคืึทืจืฉื™ื“ืŸ ื˜ื™ื™ืคึผืก ืคื•ืŸ ืื ืคืืœืŸ (XSS, DNS Rebinding, CSRF, Clickjacking), ืื™ื– ื’ืขื ื™ืฆื˜ ื•ื•ื™ ืึท ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ Tor Browser ืื•ืŸ ืคื™ืœืข ืคึผืจื™ื•ื•ืึทื˜ืงื™ื™ื˜-ืึธืจื™ืขื ื˜ื™ื“ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–. ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื“ื™ ืื•ื™ืกื–ืขืŸ ืคื•ืŸ ื“ื™ ื•ื•ืขืจืกื™ืข ืคึฟืึทืจ ืงืจืึธื•ื ืื™ื– ืึท ื•ื•ื™ื›ื˜ื™ืง ื‘ื™ื ืข ืื™ืŸ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ื™ ืคึผืจื•ื™ืขืงื˜ - ื“ื™ ืงืึธื“ ื‘ืึทื–ืข ืื™ื– ืื™ืฆื˜ ื™ื•ื ืึทืคื™ื™ื“ ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืฉืึทืคึฟืŸ ืึทืกืขืžื‘ืœื™ื– ืคึฟืึทืจ ื‘ื™ื™ื“ืข ืคื™ืจืขืคืึธืงืก ืื•ืŸ ื‘ืจืึทื•ื–ืขืจื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ Chromium ืžืึธื˜ืึธืจ.

ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ื“ื™ืคืขืจืึทื ืกื™ื– ืื™ืŸ ื“ื™ ืคึผืจืึธื‘ืข ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹NoScript ืคึฟืึทืจ ืงืจืึธื•ื ืื™ื– ื“ื™ ื“ื™ืกื™ื™ื‘ืึทืœื™ื ื’ ืคื•ืŸ ื“ื™ XSS ืคื™ืœื˜ืขืจ ื’ืขื ื™ืฆื˜ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ืงืจื™ื™ึทื–-ืคึผืœืึทืฅ ืกืงืจื™ืคึผื˜ื™ื ื’ ืื•ืŸ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืงืึธื“. ื‘ื™ื– ื“ืขื ืฉื˜ืจื™ืš ืื™ื– ืึทืจื•ื™ืฃ ืื•ืŸ ืคืœื™ืกื ื“ื™ืง, ื™ื•ื–ืขืจื– ื•ื•ืขื˜ ื”ืึธื‘ืŸ ืฆื• ืคืึทืจืœืึธื–ื  ืื•ื™ืฃ Chrome ืก ื’ืขื‘ื•ื™ื˜-ืื™ืŸ XSS ืึทื•ื“ื™ื˜ืึธืจ, ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ื•ื•ื™ ืขืคืขืงื˜ื™ื•ื• ื•ื•ื™ NoScript ืก ื™ื ื“ื–ืฉืขืงืฉืึทืŸ ื˜ืฉืขืงืขืจ. ื“ื™ XSS ืคื™ืœื˜ืขืจ ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืคึผืึธืจื˜ื™ื“ ื ืึธืš ื•ื•ื™ื™ึทืœ ืขืก ืจื™ืงื•ื•ื™ื™ืขืจื– ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืก ื‘ืขื˜ืŸ ืคึผืจืึทืกืขืกื™ื ื’ ืฆื• ืึทืจื‘ืขื˜ืŸ. ืื™ืŸ ืื™ื™ืŸ ืžืึธืœ, ื•ื•ืขืŸ ืžืึธื•ื•ื™ื ื’ ืฆื• ื•ื•ืขื‘ืขืงืกื˜ืขื ืฉืึทืŸ, ืžืึธื–ื™ืœืœืึท ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ื“ืขื ืึทืคึผื™ ืขื˜ืœืขื›ืข ืึทื•ื•ืึทื ืกื™ืจื˜ืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ื ื™ื™ื˜ื™ืง ืคึฟืึทืจ ื ืึธืกืงืจื™ืคึผื˜, ืึทื–ืึท ื•ื•ื™ ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืก ื”ืึทื ื“ืœืขืจืก, ื•ื•ืึธืก Google ื”ืื˜ ื ื™ืฉื˜ ื ืึธืš ื˜ืจืึทื ืกืคืขืจื“ ืฆื• ืงืจืึธื•ื.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’