NoScript Updates

NoScript 1.9.9.45

Thu, 04 Feb 2010 18:44:12 GMT

x Enhanced compatibility with Paypal encrypted buttons
x Fixed some anti-popunder surrogate incompatibilities

NoScript 1.9.9.42

Thu, 28 Jan 2010 00:04:16 GMT

+ ClearClick: more efficient code paths specific to Fx 3.6 and above 
x Fixed zoom-related ClearClick false positives on Fx 3.6 and above
x Fixed fonts being reported as "unknown" type in Blocked Objects menu

NoScript 1.9.9.39

Wed, 20 Jan 2010 13:19:31 GMT

x Fixed quirks mode triggered by surrogate execution on Gecko < 1.9.1
  (thanks Power for suggestions)

NoScript 1.9.9.36

Sat, 16 Jan 2010 22:59:18 GMT

+ Anti-Popunder surrogate now applies to all HTTP pages by default
+ DNS activity logging facility (disabled by default)
x Slight optimization of DNS lookups
x Temptative fix for https://bugzilla.mozilla.org/show_bug.cgi?id=501446
  crasher (thanks timeless)

NoScript 1.9.9.35

Wed, 06 Jan 2010 18:35:39 GMT

x Updated Firefox Mobile (Fennec) compatibility
x Improved and generalized Anti-Popunder surrogate

NoScript 1.9.9.30

Wed, 30 Dec 2009 15:42:42 GMT

+ Injection Checker compatibility with Livejournal comment posting
+ Improved ClearClick compatibility with Facebook applications

NoScript 1.9.9.27

Fri, 18 Dec 2009 13:24:41 GMT

x Placeholder enhancements backported to Gecko 1.8.x
x Fixed missing placeholders on Gecko 1.8.x (thanks al9_x for reporting)

NoScript 1.9.9.26

Thu, 17 Dec 2009 22:10:33 GMT

x Reduced reflow chances on placeholder activation
x Improved InjectionChecker compatibility with Facebook Connect

NoScript 1.9.9.25

Wed, 16 Dec 2009 16:07:44 GMT

x Fixed Flash swallowed clicks regression on Gecko 1.8.x (thanks al9_x for
  reporting)

NoScript 1.9.9.22

Tue, 15 Dec 2009 00:52:01 GMT

x Fixed "no partial icon when frameset and frame are scriptless" issue
  (thanks al9_x for reporting)

NoScript 1.9.9.19

Sun, 06 Dec 2009 19:14:16 GMT

+ Optimized matching for HTML 5 event handlers injection
+ "Allow sites opened through bookmarks" won't allow sites previously
  marked as untrusted
x Turned the noscript.canonicalFQDN to false by default
x Improved embedded objects identity checks upon reloads

NoScript 1.9.9.18

Fri, 27 Nov 2009 23:55:15 GMT

x Removed residual compound attribute-based injection chance (thanks
  Sirdarckcat for reporting)

NoScript 1.9.9.17

Thu, 26 Nov 2009 00:33:23 GMT

x Fixed residual crash issue when favicons need to be redirected to HTTPS
x Enhanced ClearClick compatibility with Photbucket

NoScript 1.9.9.15

Tue, 17 Nov 2009 00:44:14 GMT

x Fixed HTTPS enforcement for embedded images breaking HTTP authentication
  (thanks polie for report)
x Fixed XHR breakage when called from a Worker (thanks Apeiron for report)
x Skip link fixing on right click
x Improved bookmarklet execution mechanism
x Improved compatibility of InjectionChecker with Facebook Connect
x Improved compatibility of InjectionChecker with Lycos Mail

NoScript 1.9.9.14

Wed, 28 Oct 2009 02:27:25 GMT

x Fixed page loading issues (hard to reproduce but reported by many)

NoScript 1.9.9.12

Tue, 27 Oct 2009 10:35:11 GMT

+ Allowing a plugin object which size is not set causes a page reload,
  assuming that scripts would be used to size it
+ Google Translate XSS exception
+ abine:* ClearClick subexception
+ Updated localizations
x Removed current URL leaking into RegExp properties if invisible link
  detection is enabled
x Hijack checks must skip error pages (thanks luntrus for report)
x Fixed XSS false positive at travelocity.com (thanks Chris Lonsberry)

NoScript 1.9.9.11

Tue, 13 Oct 2009 23:12:21 GMT

+ Reorganization of the "Embeddings" (FKA "Plugins") options panel
+ "Forbid  / " option in the "Embeddings" panel
+ "Forbid @font-face" option in the "Embeddings" panel
+ ClearClick report id made selectable (thanks therube for RFE)

NoScript 1.9.9.07

Sun, 04 Oct 2009 22:03:43 GMT

+ Improved Google Analytics surrogate, handling form submissions (thanks
  Alan Baxter for report)

NoScript 1.9.9.06

Sun, 04 Oct 2009 21:31:37 GMT

+ Added https://mail.google.com/* to X-Frame-Options parent whitelist, in
  order to allow GMail/Calendar mashups via extensions and GreaseMonkey
x Fixed noscript.forbidIFrameContext set to 0 blocking top-level web pages
  loading (thanks Aerik for report)
x Fixed Yahoo! Mail login persistence issue (thanks Ronnie for report)

NoScript 1.9.9.05

Thu, 01 Oct 2009 14:24:00 GMT

+ Improved emulation of complex bookmarklet import sequences
x Fixed potential issue in new InjectionChecker C++ style comments code