Follow @ma1 for latest news about NoScript and web browser security. Use NoScript to protect yourself against malicious web content. https://nitter.cf/t.co/OSDx439jxJ
Joined March 2009
- Tweets80
- Following4
- Followers747
- Likes71
13.6.6 just out:
- "S" gesture optional & disabled by default
- Enable it in Options>Appearance to skip the new Android Firefox menu 3 taps navigation
- Lowered activation threshold + tooltip to guide the gesture
Thanks for your patience, and your past & future feedback❤️
New "S" gesture for Android in NoScript 13.6.x, along with other less visible improvements in policy enforcement, both in NoScript proper and in the NoScript Commons Library.
noscript.net/getit
Casual reminder about NoScript's mitigations going far beyond selective #JavaScript execution (on @firefox-based browser at least, such as @torproject & @mullvadnet).
#ConsensualBrowsing
It couldn't work in the Tor Browser, neither in the @mullvadnet Browser, because of @noscript's noscript.net/usage/#lan-prot… (independent from #JavaScript blocking, which may help as well).
📯NoScript 13.5.6 is out!
Main news:
- New option to disable automatic page reloading on permissions change
- Fix quirks mode rendering bug on cold load of pages from file:// URLs
⬇️ noscript.net/getit
#NoScript 13.5 is out, with many user experience improvements:
- cascade permissions" mode
- onboarding / site classification behavior panel
- many content #usability and #security enhancements
Special thanks to @OpenTechFund for their strenuous support!
noscript.net/
ALT A screenshot of the new NoScript Onboarding / Site Classification Behavior page. Text: **Site Classification Behavior** Please select the way NoScript behaves when encountering unclassified sites. You can revisit this choice from the NoScript Options page and whenever you reset NoScript. - STRICT / Default Deny The traditional and most secure NoScript behavior: unclassified sites, marked as "DEFAULT", are NOT considered trusted. Potentially harmful capabilities, including scripts, are disabled. You can manually enable the sites you trust by opening the NoScript interface and marking them as "TRUSTED", or further customize their capabilities by selecting "CUSTOM". - EASIER / Auto A compromise between security and convenience: the top level site, whose address is shown in the navigation bar, is automatically promoted to "Temporarily TRUSTED" unless already manually classified. 3d party sites still need to be classified manually. Cross-site protections are still enforced.
"We decided to move control of Wasm to @noscript, which bundled with Tor Browser & already manages #JavaScript & other security features.
Wasm now works on privileged browser pages such as the PDF renderer, but NoScript will continue blocking the technology on regular websites"
🎉 Tor Browser 15.0 is now available! Our first stable release based on Firefox ESR 140, incorporating a year's worth of changes. Download now from the Tor Browser download page: blog.torproject.org/new-rele…
NoScript 13.2.2 is out:
- Works around a a long-standing breakage on Proton Mail
- Erases temporary permissions when last tab is closed on Android, as a work-around for the "Quit" browser menu command actually keeping Firefox alive, even if hidden.
noscript.net/getit
NoScript 13.1 is out.
- New wasm capability for per-site WebAssembly control
- Fix for some visual breakages where unrestricted CSS is off
- Best effort avoidance of extra tab bars for AI Chatbot sidebar detection
noscript.net/getit
NoScript 13.0.9 is out, both for Firefox and Chromium based browsers (Manifest V3 compatible).
Most notable news are complete control on Firefox's AI chatbot sidebar content and improved integration with private browsers (@torproject and @mullvadnet).
noscript.net/getit
OTF is the top contributor to @noscript, and an important funder for @torproject, @signalapp & other key #security, #privacy, anti-#surveillance/#censorship tech. Its exceptional staff's ability to evaluate & support #FOSS projects in this space is vital for #InternetFreedom💜💪
.@OpenTechFund filed a lawsuit yesterday as a last resort to contest the termination of our grant, which would cause irreparable harm to internet freedom technologies and their users in authoritarian countries—especially those in China.
Learn more
ow.ly/lA6o50Vm9L8
...the new stateless architecture both browser families share.
Many thanks to @OpenTechFund for supporting this effort!❤️
Ahead, more fixes and UX improvements, on track to celebrate our 20th birthday on May 13 with NoScript 13 🎂.
Happy new year! 🎊
noscript.net/getit
2/2
Starting 2025 with a bang:
NoScript 12.1.1 is the first stable release sharing the same code branch across Manifest V2 (Firefox 🦊, @torproject 🧅) and Manifest V3 (Chromium-based) browsers. It also fixes 11.5.2/12.0.x bugs caused by...
1/2
#NoScript 11.5.x is out🔥
⚡ Min compat bumped to Firefox 115 for code modernization (11.4.x still available for older browsers & MV2-forced #chromium)
⚡ Fully stateless arc: a major step toward #MV3 support in NoScript 12.0 for #chrome, later this month)
noscript.net/getit
PSA for users of ancient browsers.
⚠️ PSA: @noscript 11.4.34 got accidentally broken on @firefox 78 and below. Therefore I've just marked it as incompatible with older browsers, automatically downgrading them to 11.4.31, which can also be manually installed from noscript.net/feed.
1/2
#NoScript 11.4.29 🔥
Main news:
⚡ Several performance improvements for active in-content countermeasures
⌨️ More configurable keyboard shortcuts (Extensions>Settings>Manage Extensions Shortcuts)
🌍 Many localizations updated
noscript.net/getit
PSA: if you help @noscript development by using dev builds and you are on 11.4.29rc1/rc2 now, you can't currently get updates on dev channel bc of a bug, and you'll be autoupdated to 11.4.29 stable eventually.
Please manually install 11.4.29rc3 from noscript.net/getit#devel.
TY!
#NoScript 11.4.24 #release
Many cross-tab leak protection UX improvements: almost no more "TabGuard" warning prompts!
If some cross-tab loaded page comes unexpectedly logged-out (w/ a "TG" NoScript badge), just reload or navigate to regain authorization.
noscript.net/changelog
#NoScript 11.4.22 #release
- Consistently enforce DEFAULT policy on top-level data: URIs (prevents socially engineered JavaScript injections)
- Improved @torproject Browser integration
- Updated #Ukrainian & #Macedonian localizations
noscript.net/changelog
#NoScript 11.4.20 #release
- Defense against prompts being abused to spoof websites and browser UI
- Better handling of blob: URLs
- Improved cross-window patching
noscript.net/changelog