Stable AMO Version, see changelog for details.
Supported browsers: Firefox (Desktop and Mobile on Android), SeaMonkey, Tor Browser (where it is built-in).
Other browsers based on Gecko versions >= 45 might work, but are not tested.
You can get latest stable version here, too, using this
direct download link for NoScript 10.1.6.3
To install, just drag and drop it onto your address bar.
v 10.1.6.3 ============================================================= x Improved tooltip clarity x Added version number to the browser action tooltip (thanks therube for RFE) x More restrictive domain matching in the main UI for "fake" TLDs, showing pseudo 2nd level domains containing one dot x Domain matching now treats unknown no-dot domains (not in the public suffixes list) as TLDs everywhere (fix finally not overwritten by auto-generated tld.js) x Fixed rc4 regression causing synchronized changes not to be persisted x Smarter XSS popup behavior when reporting concurrent events from/to the same origins x Fixed full breakage when sync storage is disabled x Improved layout on small screens (less than 10cm wide) x Moved preset customization into its own (more discoverable) global Options section, rather than embedded in assignment x Improved validation of manual entries x Needed capabilities highlighted also on short-hand domain matched entries inside the CUSTOM preset x Domain matching now works also for manually entered TLDs and pseudo-TLDs, such as "gov.us" or "cloudflare.net"
If you find any problem installing it, this FAQ may help.
v 220.127.116.11 ============================================================= x [XSS] Fixed regression (thanks Masato Kinugava for report)
Users of Firefox 44 and below are urged to upgrade their very unsafe browser. For those few who can't,
- latest NoScript version compatible with Gecko 46 - Gecko 56 is 5.1.x;
- latest NoScript version compatible with Gecko 13 - Gecko 45 is 18.104.22.168;
- latest NoScript version compatible with Gecko 1.9 - Gecko 12 is 22.214.171.124rc1;
- latest NoScript version compatible with Gecko < 1.9 is 1.10.
If you're brave enough and you need a specific feature or fix not released yet, or you simply
want to provide feedback before official release, you may want try this
"Quantum" NoScript 10.1.6.4rc4 development build (here the "Classic" NoScript 126.96.36.199rc2 development build).
v 10.1.6.4rc4 ============================================================= x Fixed duplicate entries in UI on page reloads (thanks 8-bit for reporting) + Spinner for long sites lists in Options page v 10.1.6.4rc3 ============================================================= - Removed obsolete work-around for accidental TRUSTED preset wiping v 10.1.6.4rc2 ============================================================= x [UI] Fixed clicking on capability's label doesn't toggle the related checkbox (thanks dhouwn and olf for reporting) v 10.1.6.4rc1 ============================================================= x [XSS] Fixed false positives on badly encoded URLs (thanks sage11 for reporting) v 188.8.131.52rc2 ============================================================= x Fixed DNT support initialization regression (thanks barbaz for reporting) v 184.108.40.206rc1 ============================================================= x [XSS] Fixed false positives on badly encoded URLs (thanks sage11 for reporting) x Script Surrogates don't affect privileged URLs anymore, unless the noscript.surrogate.matchPrivileged about:config preference is set to true (thanks barbaz for RFE) x [e10s] Fixed temporary permissions inter-process sync issue (thanks to the TorBrowser team for solution)
You can also discuss about NoScript on this Forum.
Have your safest browsing experience!