There's a browser safer than Firefox...
...it is Firefox, with NoScript!
NoScript 10 "Quantum" resources
NoScript also provides the most powerful anti-XSS and anti-Clickjacking protection ever available in a browser.
NoScript's unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality...
You can enable JavaScript, Java and plugin execution for sites you trust with a simple left-click
on the NoScript status bar icon (look at the picture), or
using the contextual menu, for easier operation in popup statusbar-less windows.
Watch the "Block scripts in Firefox" video
by cnet.
Staying safe has never been so easy!
Experts will agree: Firefox is really safer with NoScript!
V. 10.1.6.2 - Secure all those processes!
If you find any bug or you'd like an enhancement, please report here or here. Many thanks!
Main good news
- Better display on mobile devices in portrait mode (Android).
- Individual temporary / permanent TRUSTED preset buttons.
- Removed customizability of DEFAULT, TRUSTED and UNTRUSTED preset from the popup (reported as a major source of confusion) while keeping it in the Options tab
- Improved XSS Filter specificity (thanks @SamuraiFoochs for reporting)
- New configuration export implementation, more convoluted but not requiring the "downloads" permission.
- Firefox Quantum support on Android.
- Fixed Linux rendering performance issues.
- Added "Export" and "Import" buttons to the Options window, the latter compatible with NoScript 5 formats (both full JSON preferences exports and plain text white/black lists).
- (Both Classic and Quantum) Improved XSS Filter ability to detect cross-encoded links (thanks Masato Kinugawa).
- Added "Reset to defaults" button and "Temporarily set top-level sites to TRUSTED" option.
- Fixed some blocked items not reported in the UI (thanks Bo Elam for reporting)
- Changed the CSP internal report URI to noscript-csp.invalid (thanks Tom Schuster Mario Heiderich for RFE)
Experts do agree...
03/10/2014, Edward Snowden endorses NoScript as a countermeasure against state Surveillance State.
08/06/2008, "I'd love to see it in there." (Window Snyder, "Chief Security Something-or-Other" at Mozilla Corp., interviewed by ZDNet about "adding NoScript functionality into the core browser").
03/18/2008, "Consider switching to the Firefox Web browser with the NoScript plug-in. NoScript selectively, and non-intrusively, blocks all scripts, plug-ins, and other code on Web pages that could be used to attack your system during visits" (Rich Mogull on TidBITS, Should Mac Users Run Antivirus Software?).
11/06/2007, Douglas Crockford, world-famous JavaScript advocate and developer of JSON (one of the building blocks of Web 2.0), recommends using NoScript.
03/16/2007, SANS Internet Storm Center, the authoritative source
of computer security related wisdom, runs a front-page
Ongoing interest in Javascript issues
diary entry by William Stearns just to say "Please, use NoScript" :)
Actually, NoScript has been recommended several times by SANS,
but it's nice to see it mentioned in a dedicated issue,
rather than as a work-around for specific exploits in the wild.
Many thanks, SANS!
05/31/2006, PC World's The 100 Best Products of the Year list features NoScript at #52!
Many thanks to PC World, of course, for grokking NoScript so much, and to IceDogg who kindly reported these news...
In the press...
- CNET News: "Giorgio Maone's NoScript script-blocking plug-in is the one-and-only Firefox add-on I consider mandatory." (March 9, 2009, Dennis O'Reilly, Get a new PC ready for everyday use)
- Forbes: "The real key to defeating malware isn't antivirus but approaches like Firefox's NoScript plug-in, which blocks Web pages from running potentially malicious programs" (Dec 11, 2008, Andy Greenberg, Filter The Virus Filters).
- PC World: Internet Explorer 7 Still Not Safe Enough because it doesn't act like "NoScript [...] an elegant solution to the problem of malicious scripting" (cite bite)
- New York Times: "[...] NoScript, a plug-in utility, can limit the ability of remote programs to run potentially damaging programs on your PC", (Jan 7, 2007, John Markoff, Tips for Protecting the Home Computer).
- PC World's Ten Steps Security features using NoScript as step #6. (cite bite)
- The Washington Post security blog compares MSIE "advanced" security features (like so called "Zones") to Firefox ones and recommends NoScript adoption as the safest and most usable approach. (cite bite)
