U-Giorgio Maone, umdali wephrojekthi , Ukukhishwa kokuqala kwesengezo sesiphequluli se-Chrome esitholakalayo ukuze sihlolwe. Isakhiwo sihambisana nenguqulo 10.6.1 yeFirefox futhi senziwa ngenxa yokudluliselwa kwegatsha le-NoScript 10 kubuchwepheshe be-WebExtension. Ukukhishwa kwe-Chrome kusesimweni se-beta futhi ukuze ulande eSitolo Sewebhu Se-Chrome. I-NoScript 11 ihlelelwe ukuthi ikhishwe ekupheleni kukaJuni, okuzoba ukukhishwa kokuqala okunokusekelwa okuzinzile kwe-Chrome/Chromium.
Isengezo esiklanyelwe ukuvimba ikhodi ye-JavaScript eyingozi nengadingeki, kanye nezinhlobo ezahlukene zokuhlasela (, , , ), esetshenziswa njengengxenye Yesiphequluli Se-Tor kanye nokusabalalisa okuningi okugxile kubumfihlo. Kuyaphawuleka ukuthi ukuvela kwenguqulo ye-Chrome kuyisigaba esibalulekile ekuthuthukisweni kwephrojekthi - manje isihlanganisiwe futhi ingasetshenziswa ukudala imihlangano yakho kokubili iFirefox neziphequluli ngokusekelwe enjinini yeChromium.
Omunye umehluko enguqulweni yokuhlola ye-NoScript ye-Chrome ukukhutshazwa kwesihlungi se-XSS esisetshenziselwa ukuvimba ukubhalwa phansi kwezindawo ezihlukene nokufaka esikhundleni sekhodi ye-JavaScript yenkampani yangaphandle. Kuze kube yilapho lesi sici sisebenza futhi, abasebenzisi kuzodingeka bathembele ku-XSS Auditor eyakhelwe ngaphakathi ye-Chrome, engasebenzi njengesihloli sokujova se-NoScript. Isihlungi se-XSS asikwazi ukuthunyelwa okwamanje ngoba sidinga ukucutshungulwa kwesicelo okungavumelani ukuze sisebenze. Ngesinye isikhathi, lapho uthuthela ku-WebExtension, onjiniyela be-Mozilla basebenzise kule API izici ezithile ezithuthukisiwe ezidingekayo ku-NoScript, njengezibambi ezingavumelanisi, i-Google engakayidluliseli ku-Chrome.
Source: opennet.ru