Get it!
Latest stable
- Get NoScript for Firefox NoScript for Firefox (desktop and mobile!), Tor Browser and other Mozilla-based browsers from Mozilla Add-ons
- Get NoScript for Chromium NoScript for Chrome and other Chromium-based browsers (eg. Edge, Brave, Vivaldi...) from the Chrome Web Store
Direct download for Firefox
You can get the latest stable version for Firefox desktop only also using this direct NoScript 11.4.42 download link. To install, just drag and drop it onto your address bar.
v 11.4.42
============================================================
x [nscl] Further SyncMessage simplification
x Mitigate race conditions on startup
Development build
NoScript development happens very fast to keep up with emerging web threats. If you're brave enough and you need a specific feature or fix not released yet, or you simply want to provide feedback before official release, you may want to try the latest release candidate.
RC for Firefox
Install NoScript 11.4.42rc2 on Firefox Desktop by simply clicking here.
On Firefox for Android, unfortunately, a pre-release can only be downloaded (same link as above) and temporarily installed on Nightly by using the web-ext tool, which is only suitable for hardcore developers and contributors.
RC for Chromium
You can Download NoScript 11.4.42rc2 for Chromium-based browsers here.
In order to install this pre-release until the next stable version reaches the Chrome Store, you need to unzip it and load it as an unpacked extension in developer mode.
Please follow these steps:
- Open the Extension Management page by navigating to chrome://extensions. Alternatively, open this page by clicking on the Extensions menu button and selecting Manage Extensions at the bottom of the menu. Alternatively, open this page by clicking on the Chrome menu, hovering over More Tools then selecting Extensions
- Enable Developer Mode by clicking the toggle switch next to Developer mode.
- Unzip the zipped "noscript-11.4.42rc2-chrome.zip" package to a directory of your choice.
- Click the [Load unpacked] button and select the extension directory you've unzipped the extension to (the one containing the "manifest.json" file)
You're done. Happy testing!
Recent development history
v 11.4.42rc2
============================================================
x [nscl] Further SyncMessage simplification
v 11.4.42rc1
============================================================
x Mitigate race conditions on startup
v 11.4.41rc4
============================================================
x [nscl] Fixed Chromium worker patching regression caused by
failSafe scope
v 11.4.41rc3
============================================================
x [nscl] Force service workers to be patched bypassing cache
v 11.4.41rc2
============================================================
x [nscl] More robust SyncMessage implementation
x [nscl] Enhanced remote worker patching
x [nscl] Remove missing source map warning for
browser-polyfill.js
x [nscl] Better console handling in execution context
patches
v 11.4.41rc1
============================================================
x Reduce console spam on non-debugging instances
x [nscl] Avoid patched workers breakage if console API is
disabled (thanks ayi for reporting)
v 11.4.40rc1
============================================================
x [nscl] Fix patched workers failures caused by Firefox
webRequest filters disconnect() breaking on large files
(thanks barbaz for reporting)
v 11.4.39rc4
============================================================
x [nscl] Fixed regression in replaying property interactions
with shadowed/patched workers
v 11.4.39rc3
============================================================
x [nscl] Improved WebGL-hooking and worker patching
stability
x [L10n] Lower to 90% the threshold for including a new
translation
x [L10n] Updated he, pt_PT
v 11.4.39rc2
============================================================
x [nscl] Prevent patchWindow from throwing on SOP violations
v 11.4.39rc1
============================================================
x [nscl] Correctly propagate extra arguments to shadowed
worker constructors
v 11.4.38rc2
============================================================
x [nscl] Reuse uuid() in SyncMessage
v 11.4.38rc1
============================================================
x Updated file exclusions on packaging
x [nscl] Simpler and safer SyncMessage logic on
Chromium-based browsers (thanks NDevTK for reporting)
x Fixed missing frameId on interception reporting
v 11.4.37rc3
============================================================
x [nscl] Do not patch windows with WebGLHook if webgl is
globally disabled
v 11.4.37rc2
============================================================
x [nscl] Do not patch workers if webgl is globally disabled
v 11.4.37rc1
============================================================
x [L10n] Updated uk
x [nscl] Workers-aware WebGL Hook
v 11.4.36rc1
============================================================
x [nscl] Merged MV3-compatible branch
x [XSS] Take in account the whole redirection chain (thanks
NDevTK for reporting)
v 11.4.35rc4
============================================================
x Improved lazy_load capability (optimization and
notification)
x [nscl] Slight optimization of NOSCRIPT element emulation
loop
x Automatically add extra capabilities to policyTypesMap
x [L10n] Updated de, fr, tr, ru, zh_CN
v 11.4.35rc3
============================================================
x Gracefully handle new capabilities still unknown to the
settings host (e.g. Tor/Mullvad browser), if any
x Configurable "lazy_load" capability (see
https://github.com/whatwg/html/issues/5250)
x [L10n] Updated fr
v 11.4.35rc2
============================================================
x Prefetch all CSS subresources (1st party included) in
private contexts where both unchecked_css and scripting
capabilities are disabled
x Forcibly neutralize lazy loading attributes when scripting
is disabled
v 11.4.35rc1
============================================================
x [nscl] Restored SyncMessage compatibility with Firefox 78
and below
x [L10n] Updated uk
x Lock nscl version on stable releases
Deprecated, obsolete and unsupported "Classic" versions
You can still download NoScript "Classic" (5.1.9) (SHA256) for Seamonkey, Palemoon, Waterfox Classic and possibly other "vintage" (pre-Gecko 57) Firefox forks here.
Notice: you may need to open about:config and set your xpinstall.signatures.required preference to false in order to install NoScript 5.x, since Mozilla doesn't support signatures for legacy add-ons anymore. If you're using a non ESR Firefox, you may also need this hack.
Users of Firefox 58 and below are urged to upgrade their very unsafe browser. For those few who can't,
- latest NoScript version compatible with Gecko 57 - Gecko 58 is 10.1.7.3;
- latest NoScript version compatible with Gecko 46 - Gecko 56 is 5.1.9 (SHA256);
- latest NoScript version compatible with Gecko 13 - Gecko 45 is 2.9.0.14 (SHA256);
- latest NoScript version compatible with Gecko 1.9 - Gecko 12 is 2.9.0.1rc1 (SHA256);
- latest NoScript version compatible with Gecko < 1.9 is 1.10 (SHA256).
Disclaimer
We cannot update nor support NoScript 5.x and below anymore, because it was based on a completely different and now obsolete technology. However you can still find usage information and a FAQ section for those ancient versions in the NoScript Classic archived website.