get it!

The 2006 100 Best Products's Best Security/Privacy Add-on 2010-2011
Flattr NoScript

Stable AMO Version, see changelog for details.

Supported browsers: Firefox 3.0 and above, SeaMonkey 2.0 and above, IceWeasel, Minefield
Other browsers based on Gecko 1.9.0 and above might work, but are not tested.

Mobile Version

If you want to test NoScript 3 alpha for Firefox 4 Mobile, compatible with Android and Maemo, you can find it at the NoScript Anywhere for Mobile mini-site.

Direct download

You can get latest stable version here, too, using this direct download link for NoScript
To install, just drag and drop it onto your address bar.

If you find any problem installing it, this FAQ may help.

Users of Firefox 2.0 and below are urged to upgrade their very unsafe browser. For those few who can't, latest legacy-compatible NoScript version is 1.10.

Development version

If you're brave enough and you need a specific feature or fix not released yet, or you simply want to provide feedback before official release, you may want try this
development build.
Recent development history:

x Partially restored "Allow local links" functionality (works for HTML
  file:// links but not for embedded resources and scripted loads)
+ "allowLocalLinks.from" about:config preference to define a whitelist
  (in ABE URL pattern list syntax) which, if valid and not empty,
  overrides the JavaScript whitelist which is reused by legacy default
  for pages allowed to open file:// links (Gecko 28 and above)
+ "" about:config preference to define a whitelist
  (in ABE URL pattern list syntax) which, if valid and not empty,
  limits the file:// links which can be opened by allowed pages
  (Gecko 28 and above)
- Removed "Allow rich text copy and paste from external clipboard" option
  from the UI if the browser doesn't support CAPS (Gecko 28 and above)

x Implemented early permission changes enforcement on not yet reloaded
  pages, to better match the old CAPS-based behavior (thanks therube
  for reporting)

x [Surrogates] Fixed Google Analytics surrogate breaking some javascript:
  links (thanks Will for reporting)
x [L18n] Fixed Finnish typo (thanks Kalle Niemitalo for reporting)
x [XSS] Removed OAuth-triggered false positive (thanks Gunnar Scherf for
x [XSS] Stricter checks for HTTPS requests from a same domain origin with
  different scheme (thanks LouiseRBaldwin for reporting)


If you find something wrong about NoScript, read the FAQ page and/or let me know: I'll try to fix it as soon as I can.

You can also discuss about NoScript on this Forum.

Have your safest browsing experience!

Download: Fast, Fun, Awesome
Download in a Flash... with FlashGot!