Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
NoScript CHANGELOG
5 https://gist.github.com/chico-gordo/915b8753de2c916f789a67c6e6593282
10 https://gist.github.com/chico-gordo/2452209fe8e8c573a3c68b8b8a36874d
[+] new feature, [x] bug fix, [-] removed feature, [=] repackaging or cosmetic change
v 2.9.5.3
Released January 17, 2017 542.1 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/releases/noscript-2.9.5.3.xpi
==========================================================================
x Fixed https://trac.torproject.org/projects/tor/ticket/20471
x Fixed FRAME blocking issue on non-e10s browsers
x Fixed incompatibility with LastPass non-AMO version 4.x
x Fixed cross-domain HTTPS requests in the same subdomain
triggering XSS false positives (thanks Robert Aldridge for
reporting)
x ABE sandbox now enforced by CSP sandbox directive (thanks
barbaz for report)
x Fixed sites marked as untrusted could not be reallowed on
the same tab
- removed obsolete noscript.docShellJSBlocking preference
v 2.9.5.3rc6
Released January 17, 2017 542.2 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.3rc6.xpi
==========================================================================
x Fixed https://trac.torproject.org/projects/tor/ticket/20471
x Fixed FRAME blocking issue on non-e10s browsers
v 2.9.5.3rc5
Released January 16, 2017 542.2 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.3rc5.xpi
==========================================================================
x Fixed incompatibility with LastPass non-AMO version 4.x
v 2.9.5.3rc4
Released January 15, 2017 542.2 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.3rc4.xpi
==========================================================================
x Fixed ABE sandbox overly restrictive on Gecko 50 and above
(thanks fatboy and barbaz for report)
v 2.9.5.3rc3
Released January 15, 2017 542.2 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.3rc3.xpi
==========================================================================
x Fixed UI synchronization issue (thanks Klayton for report)
v 2.9.5.3rc2
Released January 14, 2017 542.2 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.3rc2.xpi
==========================================================================
x Fixed browsers older than Gecko 50 unaffected by ABE's
sandbox action (thanks barbaz for reporting)
x Fixed cross-domain HTTPS requests in the same subdomain
triggering XSS false positives (thanks Robert Aldridge for
reporting)
v 2.9.5.3rc1
Released January 12, 2017 542.2 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.3rc1.xpi
==========================================================================
x ABE sandbox now enforced by CSP sandbox directive (thanks
barbaz for report)
x Fixed sites marked as untrusted could not be reallowed on
the same tab
- removed obsolete noscript.docShellJSBlocking preference
v 2.9.5.2
Released November 28, 2016 542.6 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/releases/noscript-2.9.5.2.xpi
==========================================================================
x Fixed Stylish editor breakage (thanks JustAnotherGuy for
reporting
x Fixed media blocking delayed with Tor Browser's "Medium"
Security Sider preset
x Fixed frame blocking issues
x Fixed top-level media loads issues
x Fixed apparent delay in menu UI feedback (thanks mechadon
for reporting)
x Fixed some XSS filter over-sensitivity regressions
x Fixed "Allow local links" causing file:// URLs to fail
x [Locale] Updated nl (thanks Ton)
v 2.9.5.2rc5
Released November 28, 2016 542.7 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.2rc5.xpi
==========================================================================
x Fixed Stylish editor breakage (thanks JustAnotherGuy for
reporting
v 2.9.5.2rc4
Released November 28, 2016 542.7 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.2rc4.xpi
==========================================================================
x Fixed media blocking delayed with Tor Browser's "Medium"
Security Sider preset
v 2.9.5.2rc3
Released November 28, 2016 542.6 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.2rc3.xpi
==========================================================================
x Fixed frame blocking issues
x Fixed top-level media loads issues
v 2.9.5.2rc2
Released November 26, 2016 542.7 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.2rc2.xpi
==========================================================================
x Fixed apparent delay in menu UI feedback (thanks mechadon
for reporting)
x Further XSS positives tweakings
v 2.9.5.2rc1
Released November 24, 2016 542.6 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.2rc1.xpi
==========================================================================
x Fixed some XSS filter over-sensitivity regressions
x Fixed "Allow local links" causing file:// URLs to fail
x [Locale] Updated nl (thanks Ton)
v 2.9.5.1
Released November 21, 2016 541.6 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/releases/noscript-2.9.5.1.xpi
==========================================================================
x Fixed some pages not loading on 1st attempt when e10s is
enabled (thanks Semtex for reporting)
v 2.9.5.1rc1
Released November 21, 2016 541.6 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5.1rc1.xpi
==========================================================================
x Fixed some pages not loading on 1st attempt when e10s is
enabled (thanks Semtex for reporting)
v 2.9.5
https://secure.informaction.com/download/releases/noscript-2.9.5.xpi
==========================================================================
+ Full e10s compatibility
x Fixed big whitelists being reset to default permissions on
e10s-enabled browsers (thanks sabret00the and Internet User
for reporting)
x Better fix for some embedding permissions issues (thanks
barbaz for reporting)
x MediaSource blocking support (Tor Project)
x Better handling of media types loaded as top-level
documents
x Declared (but untested) Palemoon support (thanks barbaz)
x [System Principal] included in the mandatory allowed list
x Fixed allow scripts globally requiring a restart (thanks
FFreestyleRR for reporting
x Fixed embeddings autoreload on e10s-disabled browsers
x Improved autoreload responsiveness and precision
x Fixed IFrame over-blocking bug (thanks G113 for report)
x Fixed sites involved in background requests being not
reported in the UI, even if intercepted and/or blocked (
thanks GH113 for reporting)
x Fixed typo in PasteHandler (thanks barbaz for reporting)
x Fixed embedding-related automatic reload issues (thanks
barbaz and tmeader for reporting)
x Fixed compatibility regression with Firefox 45
x [Surrogate] Fixed file:// replacements broken (thanks
barbaz for reporting)
x Fixed typo in XSS filter breaking JSON cross-site requests
x Fixed automatic reload issues (thanks GH113 for reporting)
x Fixed UI not always synchronized on startup (thanks GH113
for reporting)
x Fixed incompatibilities with older Firefox down to 45
(thanks barbaz for reporting)
x Fixed automatic reload impossible to be disabled (thanks
GH113 for reporting)
x Fixed UI initially not synced on new windows (thanks GH113
for reporting)
x Fixed bug in secure cookie enforcement upgrading all the
unsecure cookies on secure connections even if a secure
cookie for the domain existed, increasing chances of
incompatibilities (thanks PDL for reporting)
x Fixed escaping issues in the noscript.js preference file
(thanks PDL for reporting)
v 2.9.5rc36
Released November 21, 2016 541.5 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc36.xpi
==========================================================================
x Fixed big whitelists being reset to default permissions on
e10s-enabled browsers (thanks sabret00the and Internet User
for reporting)
v 2.9.5rc35
Released November 20, 2016 540.9 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc35.xpi
==========================================================================
x Better fix for some embedding permissions issues (thanks
barbaz for reporting)
x MediaSource blocking support (Tor Project)
x Better handling of media types loaded as top-level
documents
x Declared (but untested) Palemoon support (thanks barbaz)
v 2.9.5rc33
Released November 16, 2016 539.1 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc33.xpi
==========================================================================
x [System Principal] included in the mandatory allowed list
^ Partial fix for some embedding permissions issues (barbaz)
v 2.9.5rc32
Released November 16, 2016 539.0 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc32.xpi
==========================================================================
x Fixed allow scripts globally requiring a restart (thanks
FFreestyleRR for reporting
v 2.9.5rc31
Released November 15, 2016 538.9 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc31.xpi
==========================================================================
x Fixed embeddings autoreload on e10s-disabled browsers
v 2.9.5rc30
Released November 15, 2016 538.9 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc30.xpi
==========================================================================
x Improved autoreload responsiveness and precision
x Fixed IFrame over-blocking bug (thanks G113 for report)
v 2.9.5rc29
Released November 15, 2016 538.6 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc29.xpi
==========================================================================
x Fixed sites involved in background requests being not
reported in the UI, even if intercepted and/or blocked (
thanks GH113 for reporting)
x Fixed typo in PasteHandler (thanks barbaz for reporting)
v 2.9.5rc28
Released November 15, 2016 538.5 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc28.xpi
==========================================================================
x Fixed embedding-related automatic reload issues (thanks
barbaz and tmeader for reporting)
v 2.9.5rc27
Released November 14, 2016 538.4 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc27.xpi
==========================================================================
x Fixed compatibility regression with Firefox 45
v 2.9.5rc26
Released November 14, 2016 538.5 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc26.xpi
==========================================================================
x [Surrogate] Fixed file:// replacements broken (thanks
barbaz for reporting)
v 2.9.5rc25
Released November 14, 2016 538.4 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc25.xpi
==========================================================================
x Fixed typo in XSS filter breaking JSON cross-site requests
v 2.9.5rc24
Released November 14, 2016 538.3 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.43 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc24.xpi
==========================================================================
x Fixed automatic reload issues (thanks GH113 for reporting)
v 2.9.5rc23
Released November 14, 2016 538.4 KiB; works with Firefox 45.0 - 56.*, SeaMonkey 2.42 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc23.xpi
==========================================================================
x Fixed UI not always synchronized on startup (thanks GH113
for reporting)
x Fixed incompatibilities with older Firefox down to 45
(thanks barbaz for reporting)
v 2.9.5rc22
Released November 13, 2016 538.5 KiB; works with Firefox 51.0a2 - 56.*, SeaMonkey 2.48 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc22.xpi
==========================================================================
x Fixed automatic reload impossible to be disabled (thanks
GH113 for reporting)
x Fixed UI initially not synced on new windows (thanks GH113
for reporting)
v 2.9.5rc21
Released November 13, 2016 538.5 KiB; works with Firefox 51.0a2 - 56.*, SeaMonkey 2.48 - *
https://secure.informaction.com/download/betas/noscript-2.9.5rc21.xpi
==========================================================================
+ Full e10s compatibility
x Fixed bug in secure cookie enforcement upgrading all the
unsecure cookies on secure connections even if a secure
cookie for the domain existed, increasing chances of
incompatibilities (thanks PDL for reporting)
x Fixed escaping issues in the noscript.js preference file
(thanks PDL for reporting)
v 2.9.0.14
Released August 08, 2016 551.4 KiB; works with Firefox 13.0 - 56.*, SeaMonkey 2.10 - *
https://secure.informaction.com/download/releases/noscript-2.9.0.14.xpi
==========================================================================
x Fixed live bookmarks in Firefox 48 or above
v 2.9.0.14rc1
Released August 08, 2016 551.5 KiB; works with Firefox 13.0 - 56.*, SeaMonkey 2.10 - *
https://secure.informaction.com/download/betas/noscript-2.9.0.14rc1.xpi
==========================================================================
x Fixed live bookmarks in Firefox 48 or above
v 2.9.0.13
Released August 01, 2016 551.4 KiB; works with Firefox 13.0 - 56.*, SeaMonkey 2.10 - *
https://secure.informaction.com/download/releases/noscript-2.9.0.13.xpi
==========================================================================
x Added missing "s" in noscript.mandatory/about:feeds
v 2.9.0.13rc1
Released August 01, 2016 551.4 KiB; works with Firefox 13.0 - 56.*, SeaMonkey 2.10 - *
https://secure.informaction.com/download/betas/noscript-2.9.0.13rc1.xpi
==========================================================================
x Added missing "s" in noscript.mandatory/about:feeds
v 2.9.0.12
Released July 25, 2016 551.4 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.12.xpi
==========================================================================
x Updated DNT implementation to match the most recent spec
about navigator.doNotTrack values (thanks Francois Merier)
x [XSS] Better compatibility with Unionbank's website (thanks
Brent for reporting)
x Fixed bug 1278735 (JavaScript disabled in private windows)
x Fixed JSON viewer not working
x about:feed in the mandatory whitelist to fix bug 1272139
x [XSS] Disable JavaScript on FTP-served pages when a
potential DOM XSS threat is detected (thanks Emanuel
Bronshtein @e3amn2l for reporting)
x Fixed DOS through script-triggered ClickToPlay confirmation
dialogs in a loop (thanks Emanuel Bronshtein @e3amn2l for
reporting)
x Fixed placeholder links might be potentially used as XSS
vectors if stars were properly aligned(thanks Emanuel
Bronshtein @e3amn2l for reporting)
x [Surrogate] Updated google-analytics.com replacement (
thanks noscriptsplox)
x [XSS] Fixed regression (thanks Masato Kinugawa for report)
v 2.9.0.12rc2
Released July 25, 2016 551.4 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.12rc2.xpi
==========================================================================
x Updated DNT implementation to match the most recent spec
about navigator.doNotTrack values (thanks Francois Merier)
x [XSS] Better compatibility with Unionbank's website (thanks
Brent for reporting)
x Fixed bug 1278735 (JavaScript disabled in private windows)
x Fixed JSON viewer not working
x about:feed in the mandatory whitelist to fix bug 1272139
x [XSS] Disable JavaScript on FTP-served pages when a
potential DOM XSS threat is detected (thanks Emanuel
Bronshtein @e3amn2l for reporting)
x Fixed DOS through script-triggered ClickToPlay confirmation
dialogs in a loop (thanks Emanuel Bronshtein @e3amn2l for
reporting)
x Fixed placeholder links might be potentially used as XSS
vectors if stars were properly aligned(thanks Emanuel
Bronshtein @e3amn2l for reporting)
v 2.9.0.12rc1
Released May 20, 2016 551.2 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.12rc1.xpi
==========================================================================
x [Surrogate] Updated google-analytics.com replacement (
thanks noscriptsplox)
x [XSS] Fixed regression (thanks Masato Kinugawa for report)
v 2.9.0.11
Released April 06, 2016 551.2 KiB; works with Firefox 13.0 - 56.*, SeaMonkey 2.10 - 2.47
https://secure.informaction.com/download/releases/noscript-2.9.0.11.xpi
==========================================================================
x [XSS] Fixed infrastructure issue preventing one filter from
being automatically synchronized with Mozilla's source code
as designed (thanks .mario and Maxim Rupp for reporting)
x [XSS] Added filtering for a potential CSRF vector (thanks
Masato Kinugawa for reporting)
v 2.9.0.11rc1
Released April 06, 2016 551.2 KiB; works with Firefox 13.0 - 56.*, SeaMonkey 2.10 - 2.47
https://secure.informaction.com/download/betas/noscript-2.9.0.11rc1.xpi
==========================================================================
x [XSS] Fixed infrastructure issue preventing one filter from
being automatically synchronized with Mozilla's source code
as designed (thanks .mario and Maxim Rupp for reporting)
x [XSS] Added filtering for a potential CSRF vector (thanks
Masato Kinugawa for reporting)
v 2.9.0.10
Released March 22, 2016 537.0 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.10.xpi
==========================================================================
x Fixed placeholder activation in Gecko 45 and above
v 2.9.0.10rc1
Released March 22, 2016 537.0 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.10rc1.xpi
==========================================================================
x Fixed placeholder activation in Gecko 45 and above
v 2.9.0.9
Released March 20, 2016 537.0 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.9.xpi
==========================================================================
x [XSS] Compatibility exception for the Printfriendly add-on
x Removed msn.com from the default whitelist, since it seems
to be unable to support HTTPS consistently
v 2.9.0.9rc1
Released March 20, 2016 537.0 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.9rc1.xpi
==========================================================================
x [XSS] Compatibility exception for the Printfriendly add-on
x Removed msn.com from the default whitelist, since it seems
to be unable to support HTTPS consistently
v 2.9.0.8
https://secure.informaction.com/download/releases/noscript-2.9.0.8.xpi
==========================================================================
x Fixed incompatibility with Firefox below version 38
x Tentative fix for an issue with explicit ports in HTTPS
upgraded URLs
v 2.9.0.8rc1
Released March 19, 2016 537.0 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.8rc1.xpi
==========================================================================
x Fixed incompatibility with Firefox below version 38
x Tentative fix for an issue with explicit ports in HTTPS
upgraded URLs
v 2.9.0.7
Released March 19, 2016 536.9 KiB; works with Firefox 38.0 - 48.0, SeaMonkey 2.35 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.7.xpi
==========================================================================
x [HTTPS] Removed legacy redirection methods when redirectTo()
is available in HTTP channels, fixing YouTube embedding
problem
x Replaced newChannel() with newChannel2() on Gecko 48
v 2.9.0.7rc2
Released March 19, 2016 536.9 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.7rc2.xpi
==========================================================================
x [HTTPS] Removed legacy redirection methods when redirectTo()
is available in HTTP channels, fixing YouTube embedding
problem
x Replaced newChannel() with newChannel2() on Gecko 48
v 2.9.0.6
Released March 18, 2016 536.8 KiB; works with Firefox 38.0 - 48.0, SeaMonkey 2.35 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.6.xpi
==========================================================================
x [HTTPS] Limit httpsDefWhitelist effect to document loads
x [XSS] Reduced eval aliasing checks false positives
v 2.9.0.6rc1
Released March 18, 2016 536.8 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.6rc1.xpi
==========================================================================
x [HTTPS] Limit httpsDefWhitelist effect to document loads
x [XSS] Reduced eval aliasing checks false positives
v 2.9.0.5
Released March 16, 2016 536.7 KiB; works with Firefox 38.0 - 48.0, SeaMonkey 2.35 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.5.xpi
==========================================================================
x [XSS] Improved detection of computed property accessors
(thanks Emanuel Bronshtein @e3amn2l for report)
x [HTTPS] Fixed httpsDefWhitelist breaking OCSP (thanks al_9x
for reporting)
x [HTTPS] Fixed httpsDefWhitelist breaking yui.yahooapis.com
(thanks Rob Greenberg for reporting
x [XSS] Fixed OpenID-related false positive
x Restored Nightly compatibility broken by bug 1253016
x Fixed regression in HTTPS enforcing exceptions
x [Surrogate] Updated googletag replacement (thanks barbaz)
x [Surrogate] Updated ga replacement (thanks barbaz)
x [XSS] Improved replacement for dangerous keywords/built-in
properties (thanks Emanuel Bronshtein @e3amn2l for report)
x [HTTPS] noscript.httpsDefWhitelist option to automatically
upgrade to HTTPS sites found in the default whitelist
(enabled by default, thanks Mazin Ahmed for reporting)
v 2.9.0.5rc4
Released March 16, 2016 536.7 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.5rc4.xpi
==========================================================================
x [XSS] Improved detection of computed property accessors
(thanks Emanuel Bronshtein @e3amn2l for report)
v 2.9.0.5rc3
Released March 15, 2016 536.7 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.5rc3.xpi
==========================================================================
x [HTTPS] Fixed httpsDefWhitelist breaking OCSP (thanks al_9x
for reporting)
x [HTTPS] Fixed httpsDefWhitelist breaking yui.yahooapis.com
(thanks Rob Greenberg for reporting
x [XSS] Fixed OpenID-related false positive
v 2.9.0.5rc2
Released March 14, 2016 536.5 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.5rc2.xpi
==========================================================================
x Restored Nightly compatibility broken by bug 1253016
x Fixed regression in HTTPS enforcing exceptions
v 2.9.0.5rc1
Released March 12, 2016 536.5 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.5rc1.xpi
==========================================================================
x [Surrogate] Updated googletag replacement (thanks barbaz)
x [Surrogate] Updated ga replacement (thanks barbaz)
x [XSS] Improved replacement for dangerous keywords/built-in
properties (thanks Emanuel Bronshtein for report)
x [HTTPS] noscript.httpsDefWhitelist option to automatically
upgrade to HTTPS sites found in the default whitelist
(enabled by default, thanks Mazin Amhed for reporting)
v 2.9.0.4
Released February 10, 2016 536.3 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/releases/noscript-2.9.0.4.xpi
==========================================================================
x Fixed InjectionChecker over-optimization bug (thanks Maxim
Rupp for reporting)
x [l10n] Updated ar (thanks Nassim Dhaher)
v 2.9.0.4rc1
Released February 10, 2016 536.4 KiB; works with Firefox 13.0 - 48.0, SeaMonkey 2.10 - 2.45
https://secure.informaction.com/download/betas/noscript-2.9.0.4rc1.xpi
==========================================================================
x Fixed InjectionChecker over-optimization bug (thanks Maxim
Rupp for reporting)
x [l10n] Updated ar (thanks Nassim Dhaher)
v 2.9.0.3
Released February 01, 2016 536.3 KiB; works with Firefox 13.0 - 47.0, SeaMonkey 2.10 - 2.43
https://secure.informaction.com/download/releases/noscript-2.9.0.3.xpi
==========================================================================
x Fixed NoScript blocking WebExtensions by default
x Fixed XSS filter JSON sanitization bug (thanks Maxim Rupp
for reporting)
v 2.9.0.3rc1
Released February 01, 2016 536.4 KiB; works with Firefox 13.0 - 47.0, SeaMonkey 2.10 - 2.43
https://secure.informaction.com/download/betas/noscript-2.9.0.3rc1.xpi
==========================================================================
x Fixed NoScript blocking WebExtensions by default
x Fixed XSS filter JSON sanitization bug (thanks Maxim Rupp
for reporting)
v 2.9.0.2
Released January 08, 2016 537.3 KiB; works with Firefox 13.0 - 46.0, SeaMonkey 2.10 - 2.42
https://secure.informaction.com/download/releases/noscript-2.9.0.2.xpi
==========================================================================
x Version bump to work around AMO's 404 when serving 2.9.0.1
v 2.9.0.1
==========================================================================
x Replaced "for each ()" with "for (... of ...)"
x Removed array comprehension usage
- Removed compatibility with Gecko lt 13
x Fixed conflict w/ KeeFox + CTR (thanks amloessb for report)
https://forums.informaction.com/viewtopic.php?p=80581
v 2.9.0.1rc2
Released January 07, 2016 537.4 KiB; works with Firefox 13.0 - 46.0, SeaMonkey 2.10 - 2.42
https://secure.informaction.com/download/betas/noscript-2.9.0.1rc2.xpi
==========================================================================
x Replaced "for each ()" with "for (... of ...)"
x Removed array comprehension usage
- Removed compatibility with Gecko lt 13
v 2.9.0.1rc1
Released January 04, 2016 537.4 KiB; works with Firefox 3.0.9 - 46.0, SeaMonkey 2.0 - 2.42
https://secure.informaction.com/download/betas/noscript-2.9.0.1rc1.xpi
==========================================================================
x Fixed conflict w/ KeeFox + CTR (thanks amloessb for report)
https://forums.informaction.com/viewtopic.php?p=80581
v 2.9
Released December 31, 2015 537.5 KiB; works with Firefox 3.0.9 - 46.0, SeaMonkey 2.0 - 2.42
https://secure.informaction.com/download/releases/noscript-2.9.xpi
==========================================================================
x [e10s] Fixed "Temporarily allow top-level sites by default"
broken by Electrolysis
x Fixed "key.revokeTemp" preference management bug (thanks
palme for patch)
v 2.9rc1
Released December 30, 2015 537.4 KiB; works with Firefox 3.0.9 - 46.0, SeaMonkey 2.0 - 2.42
https://secure.informaction.com/download/betas/noscript-2.9rc1.xpi
==========================================================================
x [e10s] Fixed "Temporarily allow top-level sites by default"
broken by Electrolysis
x Fixed "key.revokeTemp" preference management bug (thanks
palme for patch)
v 2.7
Released November 22, 2015 537.3 KiB; works with Firefox 3.0.9 - 46.0, SeaMonkey 2.0 - 2.42
https://secure.informaction.com/download/releases/noscript-2.7.xpi
==========================================================================
- Removed informaction.com, flashgot.net and maone.net from
the default whitelist to reduce the potential attack
surface
- Removed vestigial noscript.forbidData preference
x Fixed shorthands not checked for ftp(s) sites (thanks
Leon Winter for patch)
x [Surrogate] Fixed googletag replacement (thanks barbaz)
x Fixed incompatibility with importScript() from workers
breaking new reCaptcha implementation (thanks Mr_KrzYch00
for reporting)
v 2.7rc1
Released November 22, 2015 537.3 KiB; works with Firefox 3.0.9 - 45.0, SeaMonkey 2.0 - 2.41
https://secure.informaction.com/download/betas/noscript-2.7rc1.xpi
==========================================================================
- Removed informaction.com, flashgot.net and maone.net from
the default whitelist to reduce the potential attack
surface
- Removed vestigial noscript.forbidData preference
x Fixed shorthands not checked for ftp(s) sites (thanks
Leon Winter for patch)
x [Surrogate] Fixed googletag replacement (thanks barbaz)
x Fixed incompatibility with importScript() from workers
breaking new reCaptcha implementation (thanks Mr_KrzYch00
for reporting)
v 2.6.9.39
Released October 19, 2015 536.3 KiB; works with Firefox 3.0.9 - 45.0, SeaMonkey 2.0 - 2.41
https://secure.informaction.com/download/releases/noscript-2.6.9.39.xpi
==========================================================================
x Work-around for a XSS "false positive" caused by nwolb.com
passing Javascript code across subdomains in window.name
(thanks Sagiv Masvari for reporting)
v 2.6.9.39rc1
Released October 10, 2015 536.4 KiB; works with Firefox 3.0.9 - 45.0, SeaMonkey 2.0 - 2.4
https://secure.informaction.com/download/betas/noscript-2.6.9.39rc1.xpi
==========================================================================
x Work-around for a XSS "false positive" caused by nwolb.com
passing Javascript code across subdomains in window.name
(thanks Sagiv Masvari for reporting)
v 2.6.9.38
Released October 08, 2015 729.2 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.38.xpi
==========================================================================
x Fixed breakage due to const declarations behavior changes
in latest Firefox nightlies (thanks to all the people in
https://bugzilla.mozilla.org/show_bug.cgi?id=1212707)
v 2.6.9.38rc1
Released October 08, 2015 729.3 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.38rc1.xpi
==========================================================================
x Fixed breakage due to const declarations behavior changes
in latest Firefox nightlies (thanks to all the people in
https://bugzilla.mozilla.org/show_bug.cgi?id=1212707)
v 2.6.9.37
Released September 28, 2015 536.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.37.xpi
==========================================================================
x Fixed bug: launching a bookmarklet on about:newTab caused
allow scripts globally for that tab (thanks James Strange
for reporting)
x [L10n] Updated French translation (thanks Syl)
x Fixed NOSCRIPT element hidden on Javascript-disabled pages
(moz bug 1208818)
x [Surrogate] enhanced gogletags.com replacement (thanks
therube)
x Fixed subtle bug in load context association causing an
origin mismatch in one corner case (thanks Gareth Heyes
for reporting)
v 2.6.9.37rc2
Released September 28, 2015 536.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.37rc2.xpi
==========================================================================
x Fixed bug: launching a bookmarklet on about:newTab caused
allow scripts globally for that tab (thanks James Strange
for reporting)
x [L10n] Updated French translation (thanks Syl)
x Fixed NOSCRIPT element hidden on Javascript-disabled pages
(moz bug 1208818)
v 2.6.9.37rc1
Released August 30, 2015 536.2 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.37rc1.xpi
==========================================================================
x [Surrogate] enhanced gogletags.com replacement (thanks
therube)
x Fixed subtle bug in load context association causing an
origin mismatch in one corner case (thanks Gareth Heyes
for reporting)
v 2.6.9.36
Released August 20, 2015 536.0 KiB; works with Firefox 3.0.9 - 44.0, SeaMonkey 2.0 - 2.39
https://secure.informaction.com/download/releases/noscript-2.6.9.36.xpi
==========================================================================
x [L10n] Fixed typo in nb-NO (thanks Mikkel H.)
x [e10s] Fixed top-level site auto-whitelisting broken
x [e10s] Fixed MozBug 1196477 (crash with allowLocalLinks)
x Shorthands reliability improvements
x [ClearClick] fixed console spam due to missing XPCOM
interfaces for HTML elements
x In order to help Netflix users with the new video delivery
system, users who have netflix.com already in their
whitelist get https://*.nflxvideo.net whitelisted as
well on upgrade
v 2.6.9.36rc2
Released August 20, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.36rc2.xpi
==========================================================================
x [L10n] Fixed typo in nb-NO (thanks Mikkel H.)
x [e10s] Fixed top-level site auto-whitelisting broken
x [e10s] Fixed MozBug 1196477 (crash with allowLocalLinks)
x Shorthands reliability improvements
v 2.6.9.36rc1
Released August 15, 2015 535.3 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.36rc1.xpi
==========================================================================
x [ClearClick] fixed console spam due to missing XPCOM
interfaces for HTML elements
x In order to help Netflix users with the new video delivery
system, users who have netflix.com already in their
whitelist get https://*.nflxvideo.net whitelisted as
well on upgrade
v 2.6.9.35
Released August 12, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.35.xpi
==========================================================================
x [Surrogate] googletagservices.com replacement now supports
custom googletag objects (thanks barbaz)
x [Surrogate] fixed surrogates stopped working on older
Gecko versions (thanks barbaz)
x [XSS] Work-around for false positive on some Yahoo! URLs
x Corrected mistyped about:pocket-saved whitelist entry
x Fixed race condition in ABE options observer causing
l.getRowCount() console spam
v 2.6.9.35rc2
Released August 11, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.35rc2.xpi
==========================================================================
x [Surrogate] fixed surrogates stopped working on older
Gecko versions - take 2
v 2.6.9.35rc1
Released August 11, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.35rc1.xpi
==========================================================================
x [Surrogate] googletagservices.com replacement now supports
custom googletag objects (thanks barbaz)
x [Surrogate] fixed surrogates stopped working on older
Gecko versions
x [XSS] Work-around for false positive on some Yahoo! URLs
x Corrected mistyped about:pocket-saved whitelist entry
x Fixed race condition in ABE options observer causing
l.getRowCount() console spam
v 2.6.9.34
Released August 02, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.34.xpi
==========================================================================
x [Surrogate] Fixed a bug preventing some replacements from
running
x [XSS] Fixed over-optimized JSON and dots erasure allowing
for a filter bypass in specific (and likely rare)
circumstances (thanks Gareth Heyes for reporting)
v 2.6.9.34rc2
Released August 02, 2015 536.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.34rc2.xpi
==========================================================================
x [Surrogate] Fixed a bug preventing some replacements from
running
v 2.6.9.34rc1
Released July 31, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.34rc1.xpi
==========================================================================
x [XSS] Fixed over-optimized JSON and dots erasure allowing
for a filter bypass in specific (and likely rare)
circumstances (thanks Gareth Heyes for reporting)
v 2.6.9.33
Released July 29, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.33.xpi
==========================================================================
x [XSS] Fixed bug in minimal inline JavaScript fragment
detection (thanks Frederik Braun for reporting)
x [L10n] Updated Russian (thanks fatboy).
x [Surrogate] fixed scope conflicts caused by the $S() object
replacement wrapper (e.g. with some EA games)
v 2.6.9.33rc2
Released July 29, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.33rc2.xpi
==========================================================================
x [XSS] Fixed bug in minimal inline JavaScript fragment
detection (thanks Frederik Braun for reporting)
x [L10n] Updated Russian (thanks fatboy).
v 2.6.9.33rc1
Released July 27, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.33rc1.xpi
==========================================================================
x [Surrogate] fixed scope conflicts caused by the $S() object
replacement wrapper (e.g. with some EA games)
v 2.6.9.32
Released July 26, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.32.xpi
==========================================================================
+ Added domains required for Netflix playback to the default
whitelist
x Fixed inline script blocking broken by latest Nightlies
x Fixed NOSCRIPT elements not being shown in script-blocked
pages on Firefox betas
x [Surrogate] shimmed or replaced code causing deprecations
x [Surrogate] updated googletag replacement (thanks barbaz)
x [XSS] Fixed regression in minimal inline JavaScript
fragment detection (thanks Gareth Heyes for reporting)
x Fixed edge case causing JavaScript redirections detection
to fail on http://qklnk.co/ (thanks Jess Hampshire for RFE)
v 2.6.9.32rc4
Released July 26, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.32rc4.xpi
==========================================================================
x [Surrogate] fixed regression causing some replacements
not to work correctly.
v 2.6.9.32rc3
Released July 25, 2015 536.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.32rc3.xpi
==========================================================================
+ Added domains required for Netflix playback to the default
whitelist
x Fixed inline script blocking broken by latest Nightlies
x Fixed NOSCRIPT elements not being shown in script-blocked
pages on Firefox betas
x [Surrogate] shimmed or replaced code causing deprecations
x [Surrogate] updated googletag replacement (thanks barbaz)
v 2.6.9.32rc2
Released July 22, 2015 535.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.32rc2.xpi
==========================================================================
x [XSS] Fixed regression in minimal inline JavaScript
fragment detection (thanks Gareth Heyes for reporting)
v 2.6.9.32rc1
Released July 22, 2015 535.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.32rc1.xpi
==========================================================================
x Fixed edge case causing JavaScript redirections detection
to fail on http://qklnk.co/ (thanks Jess Hampshire for RFE)
v 2.6.9.31
Released July 15, 2015 535.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.31.xpi
==========================================================================
x [XSS] Fixed attribute injection checks regression (thanks
Maxim Rupp and .mario of Cure53 for reporting)
v 2.6.9.31rc1
Released July 15, 2015 535.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.31rc1.xpi
==========================================================================
x [XSS] Fixed attribute injection checks regression (thanks
Maxim Rupp and .mario of Cure53 for reporting)
v 2.6.9.30
Released July 09, 2015 535.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.30.xpi
==========================================================================
x Fixed noscript.allowWhitelistUpdates preference being
ignored
+ Filtering out whitelist additions not required by the
the specific current browser type and version
+ Added about:pocket-save and about:pocket-signup to the
default whitelist
x More restrictive and accurate INCLUSION type check (thanks
Meee for reporting)
x [XSS] Further invalid characters optimization refinement
(thanks Mathias Karlsson for reporting)
x [XSS] Fixed XML stripping optimization to prevent inline
injections (thanks Mathias Karlsson for reporting)
x Default whitelist maintenance: removed prototypejs.org,
cdnjs.cloudflare.com; restored maps.googleapis.com
x [XSS] Updated inline event handlers related code preventing
potential 2nd order injections on very badly coded websites
(thanks Mathias Karlsson for reporting)
v 2.6.9.30rc5
Released July 07, 2015 535.4 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.30rc5.xpi
==========================================================================
x Fixed about:packet-save whitelisted instead of
about:pocket-saved
x Fixed noscript.allowWhitelistUpdates preference being
ignored
+ Filtering out whitelist additions not required by the
the specific current browser type and version
v 2.6.9.30rc4
Released July 07, 2015 535.3 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.30rc4.xpi
==========================================================================
+ Added about:pocket-save and about:pocket-signup to the
default whitelist
x More restrictive and accurate INCLUSION type check (thanks
Meee for reporting)
v 2.6.9.30rc3
Released July 03, 2015 535.2 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.30rc3.xpi
==========================================================================
x [XSS] Further invalid characters optimization refinement
(thanks Mathias Karlsson for reporting)
v 2.6.9.30rc2
Released July 03, 2015 535.2 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.30rc2.xpi
==========================================================================
x [XSS] Fixed XML stripping optimization to prevent inline
injections (thanks Mathias Karlsson for reporting)
x Default whitelist maintenance: removed prototypejs.org,
cdnjs.cloudflare.com; restored maps.googleapis.com
v 2.6.9.30rc1
Released July 01, 2015 535.2 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.30rc1.xpi
==========================================================================
x [XSS] Updated inline event handlers related code preventing
potential 2nd order injections on very badly coded websites
(thanks Mathias Karlsson for reporting)
v 2.6.9.29
Released July 01, 2015 536.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.29.xpi
==========================================================================
x [XSS] Improved specificity of invalid characters
optimization to remove a string literal breaking detection
bypass (thanks Mathias Karlsson for reporting)
v 2.6.9.29rc1
Released July 01, 2015 536.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.29rc1.xpi
==========================================================================
x [XSS] Improved specificity of invalid characters
optimization to remove a string literal breaking detection
bypass (thanks Mathias Karlsson for reporting)
v 2.6.9.28
Released June 30, 2015 536.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.28.xpi
==========================================================================
x Narrowed googleapis.com default whitelist entry to
ajax.googleapis.com
x [Surrogate] Updated gigya.com and 2mdn.net replacements
(thanks saaib)
v 2.6.9.28rc2
Released June 30, 2015 536.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.28rc2.xpi
==========================================================================
x Narrowed googleapis.com default whitelist entry to
ajax.googleapis.com
v 2.6.9.28rc1
Released June 30, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.28rc1.xpi
==========================================================================
v 2.6.9.27
Released June 17, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.27.xpi
==========================================================================
x Fixed media elements being blocked on first (uncached)
request (thanks RobertDrew for reporting)
+ noscript.middlemouse_temp_allow_main_site about:config
preference to control whether middle-clicking the toolbar
button should allow current top document's site (thanks
barbaz)
x [L10n] Updated Belarusian (thanks Dzmitry Drazdou)
+ Default whitelist retroactive removal ability
x Removed vjs.zendcdn.net from the default whitelist
v 2.6.9.27rc1
Released June 17, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.27rc1.xpi
==========================================================================
x Fixed media elements being blocked on first (uncached)
request (thanks RobertDrew for reporting)
+ noscript.middlemouse_temp_allow_main_site about:config
preference to control whether middle-clicking the toolbar
button should allow current top document's site (thanks
barbaz)
x [L10n] Updated Belarusian (thanks Dzmitry Drazdou)
+ Default whitelist retroactive removal ability
x Removed vjs.zendcdn.net from the default whitelist
v 2.6.9.26
Released May 29, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.26.xpi
==========================================================================
x Extended the redirectTo() safety net for to all the internal
redirections
x Work-around for redirectTo() breaking Flash plugin
subrequests
x Got ChannelReplacement backed by HTTPChannel.redirectTo()
whenever possible (should fix moz-bug 1153256 for good)
x Fixed double redirection in HTTPS enforcing
v 2.6.9.26rc3
Released May 28, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.3
https://secure.informaction.com/download/betas/noscript-2.6.9.26rc3.xpi
==========================================================================
x Extended the redirectTo() safety net for to all the internal
redirections
v 2.6.9.26rc2
Released May 28, 2015 536.0 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.26rc2.xpi
==========================================================================
x Work-around for redirectTo() breaking Flash plugin
subrequests
v 2.6.9.26rc1
Released May 27, 2015 534.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.26rc1.xpi
==========================================================================
x Got ChannelReplacement backed by HTTPChannel.redirectTo()
whenever possible (should fix moz-bug 1153256 for good)
x Fixed double redirection in HTTPS enforcing
v 2.6.9.25
Released May 23, 2015 533.8 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.25.xpi
==========================================================================
x Fixed regression preventing HTTPS enforcing exceptions from
being honored
v 2.6.9.25rc1
Released May 23, 2015 533.8 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.25rc1.xpi
==========================================================================
x Fixed regression preventing HTTPS enforcing exceptions from
being honored
v 2.6.9.24
https://secure.informaction.com/download/releases/noscript-2.6.9.24.xpi
==========================================================================
x Fix for intermittent crashes on older Gecko versions
v 2.6.9.24rc1
Released May 23, 2015 533.7 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.24rc1.xpi
==========================================================================
x Fix for intermittent crashes on older Gecko versions
v 2.6.9.23
Released May 22, 2015 533.8 KiB; works with Firefox 31.0 - 41.0, SeaMonkey 2.31 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.23.xpi
==========================================================================
x Work-around for moz-bug 1167371
x Fixed fatal regression on Firefox 34 and below
x Improved backward compatibility
x Work-around for anonymized plugin subrequests being vetoed
by channel event sink
x Fixed backward compatibility PopupBoxObject shim
x [E10s] Fixed cascading permissions broken when checks are
performed cross-process
x [Surrogate] Removed deprecated "for each" constructs from
replacements
x [L10n] Updated ru-RU (thanks negodnik)
x Tentative fix for Bug 1153256 (thanks Dragana Damjanovic)
+ Added about:preferences to the mandatory whitelist
- Removed legacy STS support
+ [Surrogate] 2mdn.net inclusion replacement (thanks barbaz)
+ [E10s] Restored inline JavaScript blocking
v 2.6.9.23rc4
Released May 22, 2015 533.8 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.23rc4.xpi
==========================================================================
x Work-around for moz-bug 1167371
x Fixed fatal regression on Firefox 34 and below
x Improved backward compatibility
v 2.6.9.23rc3
Released May 21, 2015 533.8 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.23rc3.xpi
==========================================================================
x Work-around for anonymized plugin subrequests being vetoed
by channel event sink
x Fixed backward compatibility PopupBoxObject shim
v 2.6.9.23rc2
Released May 20, 2015 534.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.23rc2.xpi
==========================================================================
x [E10s] Fixed cascading permissions broken when checks are
performed cross-process
x [Surrogate] Removed deprecated "for each" constructs from
replacements
x Fixed missing default preferences (thanks barbaz)
v 2.6.9.23rc1
Released May 19, 2015 534.1 KiB; works with Firefox 3.0.9 - 41.0, SeaMonkey 2.0 - 2.38
https://secure.informaction.com/download/betas/noscript-2.6.9.23rc1.xpi
==========================================================================
x [L10n] Updated ru-RU (thanks negodnik)
x Tentative fix for Bug 1153256 (thanks Dragana Damjanovic)
+ Added about:preferences to the mandatory whitelist
- Removed legacy STS support
+ [Surrogate] 2mdn.net inclusion replacement (thanks barbaz)
+ [E10s] Restored inline JavaScript blocking
v 2.6.9.22
Released April 20, 2015 534.2 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.22.xpi
==========================================================================
+ [Surrogate] Generalized OWASP antiClickjacking replacement
(thanks barbaz for RFE)
+ [Surrogate] Wordpress scriptless site auto-show replacement
+ bootstrapcdn.com in default whitelist
v 2.6.9.22rc1
Released April 20, 2015 534.2 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.22rc1.xpi
==========================================================================
+ [Surrogate] Generalized OWASP antiClickjacking replacement
(thanks barbaz for RFE)
+ [Surrogate] Wordpress scriptless site auto-show replacement
+ bootstrapcdn.com in default whitelist
v 2.6.9.21
Released April 07, 2015 534.0 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.21.xpi
==========================================================================
+ Added "mediasource:" to the mandatory whitelist (Moz-Bug
1151638)
x [Surrogate] Updated googletagservices.com replacement
(thanks barbaz)
x Better compatibility with SDK-based add-ons using data:
URIs (thanks Mingyi Liu for report)
v 2.6.9.21rc1
Released April 07, 2015 534.1 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.21rc1.xpi
==========================================================================
+ Added "mediasource:" to the mandatory whitelist (Moz-Bug
1151638)
x [Surrogate] Updated googletagservices.com replacement
(thanks barbaz)
x Better compatibility with SDK-based add-ons using data:
URIs (thanks Mingyi Liu for report)
v 2.6.9.20
Released March 31, 2015 533.9 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.20.xpi
==========================================================================
x Improved "Recently blocked sites..." recording
x Fixed inconsistencies in data: URIs handling (thanks barbaz
for reporting)
v 2.6.9.20rc2
Released March 31, 2015 533.9 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.20rc2.xpi
==========================================================================
x Improved "Recently blocked sites..." recording
v 2.6.9.20rc1
Released March 28, 2015 533.9 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.20rc1.xpi
==========================================================================
x Fixed inconsistencies in data: URIs handling (thanks barbaz
for reporting)
v 2.6.9.19
Released March 20, 2015 533.8 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.19.xpi
==========================================================================
+ [Surrogate] .gigya.com replacement provided by barbaz
+ [Surrogate] js.stripe.com replacement provided by barbaz
+ Improved usability of new Yahoo! video activation (thanks
Glenn for reporting)
+ Added googlevideo.com to the default whitelist because it's
now required to play Youtube movies (thanks barbaz for RFE)
v 2.6.9.19rc2
Released March 20, 2015 533.8 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.19rc2.xpi
==========================================================================
+ [Surrogate] .gigya.com replacement provided by barbaz
+ [Surrogate] js.stripe.com replacement provided by barbaz
v 2.6.9.19rc1
Released March 19, 2015 533.7 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.19rc1.xpi
==========================================================================
+ Improved usability of new Yahoo! video activation (thanks
Glenn for reporting)
+ Added googlevideo.com to the default whitelist because it's
now required to play Youtube movies (thanks barbaz for RFE)
v 2.6.9.18
Released March 13, 2015 533.5 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.18.xpi
==========================================================================
x Fixed restrictSubdocScripts/globalHTTPSWhitelist
interaction issue (thanks Tor Project for report)
x Fixed regression always disabling scripts whenever site's
host name is a IPv6 literal (thanks ipv6user for report)
x Fixed menu automatic disappearance on mouse exit broken by
Firefox 36 changes (thanks randavis, cumdacon and barbaz
for report)
v 2.6.9.18rc3
Released March 12, 2015 533.6 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.18rc3.xpi
==========================================================================
x Fixed restrictSubdocScripts/globalHTTPSWhitelist
interaction issue (thanks Tor Project for report)
v 2.6.9.18rc2
Released March 11, 2015 533.5 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.18rc2.xpi
==========================================================================
x Fixed regression always disabling scripts whenever site's
host name is a IPv6 literal (thanks ipv6user for report)
v 2.6.9.18rc1
Released March 11, 2015 533.4 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.18rc1.xpi
==========================================================================
x Fixed menu automatic disappearance on mouse exit broken by
Firefox 36 changes (thanks randavis, cumdacon and barbaz
for report)
v 2.6.9.17
Released March 08, 2015 533.3 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/releases/noscript-2.6.9.17.xpi
==========================================================================
x Fixed cascadePermissions/globalHTTPSWhitelist interaction
issue with IFRAMEs (thanks Tor Project for report)
x Fixed cascadePermissions being enforced also if the top
document is implicitly allowed by the globalHTTPSWhitelist
policy, rather than explicitly whitelisted, causing HTTP
subdocument and scripts to be unintendendly allowed when
the top document is HTTPS (thanks Tor Project for report)
x [Surrogate] Update Google Analytics replacement (thanks
barbaz)
v 2.6.9.17rc2
Released March 06, 2015 533.4 KiB; works with Firefox 3.0.9 - 40.0, SeaMonkey 2.0 - 2.37
https://secure.informaction.com/download/betas/noscript-2.6.9.17rc2.xpi
==========================================================================
x Fixed cascadePermissions/globalHTTPSWhitelist interaction
issue with IFRAMEs (thanks Tor Project for report)
v 2.6.9.17rc1
Released March 05, 2015 533.3 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.17rc1.xpi
==========================================================================
x Fixed cascadePermissions being enforced also if the top
document is implicitly allowed by the globalHTTPSWhitelist
policy, rather than explicitly whitelisted, causing HTTP
subdocument and scripts to be unintendendly allowed when
the top document is HTTPS (thanks Tor Project for report)
x [Surrogate] Update Google Analytics replacement (thanks
barbaz)
v 2.6.9.16
Released March 01, 2015 533.1 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/releases/noscript-2.6.9.16.xpi
==========================================================================
+ [Surrogate] Updated Gravatar surrogate (thanks barbaz)
+ Additional HTML sanitization when pasting rich text into
content-editable elements (thanks .mario for RFE)
+ Introduced framework for E10s migration, starting with new
features and fixes
x Removed deprecated let () expressions from the code base
v 2.6.9.16rc1
Released March 01, 2015 533.2 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.16rc1.xpi
==========================================================================
+ [Surrogate] Updated Gravatar surrogate (thanks barbaz)
+ Additional HTML sanitization when pasting rich text into
content-editable elements (thanks .mario for RFE)
+ Introduced framework for E10s migration, starting with new
features and fixes
x Removed deprecated let () expressions from the code base
v 2.6.9.15
Released February 19, 2015 531.7 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/releases/noscript-2.6.9.15.xpi
==========================================================================
+ Fixed regression in 2.6.9.12 causing data: URI documents
to be scripting-enabled (thanks GOF for tweet)
v 2.6.9.15rc1
Released February 19, 2015 531.7 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.15rc1.xpi
==========================================================================
+ Fixed regression in 2.6.9.12 causing data: URI documents
to be scripting-enabled (thanks GOF for tweet)
v 2.6.9.14
Released February 18, 2015 531.7 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/releases/noscript-2.6.9.14.xpi
==========================================================================
+ [Surrogate] OWASP legacy Javascript-based "antiClickjack"
protection surrogate to unhide "protected" pages when
scripting is disabled (thanks Thrawn)
+ Restored noscript.forbidXHR functionality trying to make it
more web-compatible (thanks barbaz for RFE)
v 2.6.9.14rc2
Released February 18, 2015 531.7 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.14rc2.xpi
==========================================================================
+ [Surrogate] OWASP legacy Javascript-based "antiClickjack"
protection surrogate to unhide "protected" pages when
scripting is disabled (thanks Thrawn)
v 2.6.9.14rc1
Released February 11, 2015 531.7 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.14rc1.xpi
==========================================================================
+ Restored noscript.forbidXHR functionality trying to make it
more web-compatible (thanks barbaz for RFE)
v 2.6.9.13
Released February 11, 2015 531.5 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/releases/noscript-2.6.9.13.xpi
==========================================================================
x [XSS] Fixed bugs in comment stripping optimization (thanks
Masato Kinugawa for reporting)
x [XSS] Better protection against some ES6 attacks (thanks
Masato Kinugawa for reporting)
- Removed support for XMLHttpRequest blocking
(noscript.forbidXHR preference). The same functionality,
if really needed, can still be achieved through ABE anyway.
v 2.6.9.13rc3
Released February 11, 2015 531.6 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.13rc3.xpi
==========================================================================
x [XSS] Fixed regression in stripping optimizations (thanks
Masato Kinugawa for reporting)
v 2.6.9.13rc2
Released February 10, 2015 531.5 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.13rc2.xpi
==========================================================================
x [XSS] Fixed bug in comment stripping optimization (thanks
Masato Kinugawa for reporting)
v 2.6.9.13rc1
Released February 10, 2015 531.5 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.13rc1.xpi
==========================================================================
x [XSS] Better protection against some ES6 attacks (thanks
Masato Kinugawa for reporting)
- Removed support for XMLHttpRequest blocking
(noscript.forbidXHR preference). The same functionality,
if really needed, can still be achieved through ABE anyway.
v 2.6.9.12
Released February 04, 2015 531.6 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/releases/noscript-2.6.9.12.xpi
==========================================================================
x Fixed origin checking bug causing sandboxed IFRAMEs to have
scripting always disabled (thanks Ellad Tadmor for report)
v 2.6.9.12rc1
Released February 04, 2015 531.7 KiB; works with Firefox 3.0.9 - 39.0, SeaMonkey 2.0 - 2.36
https://secure.informaction.com/download/betas/noscript-2.6.9.12rc1.xpi
==========================================================================
x Fixed origin checking bug causing sandboxed IFRAMEs to have
scripting always disabled (thanks Ellad Tadmor for report)
v 2.6.9.11
Released January 16, 2015 531.6 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/releases/noscript-2.6.9.11.xpi
==========================================================================
x [Surrogate] microsoftSupport surrogate to force the content
to be shown if scripts are disabled (thanks thunderscript)
x Check private browsing against chrome rather than content
windows (prevents annoying warning console messages)
v 2.6.9.11
Released January 16, 2015 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/releases/noscript-2.6.9.11.xpi
==========================================================================
x [Surrogate] microsoftSupport surrogate to force the content
to be shown if scripts are disabled (thanks thunderscript)
x Check private browsing against chrome rather than content
windows (prevents annoying warning console messages)
v 2.6.9.10
Released December 25, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/releases/noscript-2.6.9.10.xpi
==========================================================================
x Fixed regression: permanently allow a web site erasing
temporary whitelist items (thanks smersh for reporting)
x Fixed private windows detection for UI adaptation broken in
SeaMonkey (thanks barbaz for reporting)
x Made the Permanent "allow" commands in private windows'
checkbox look and behave like the other options in the
"Appearance" tab, i.e. controlling the visibility of the
menu item by the same name
v 2.6.9.10rc2
Released December 24, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/betas/noscript-2.6.9.10rc2.xpi
==========================================================================
x Fixed regression: permanently allow a web site erasing
temporary whitelist items (thanks smersh for reporting)
v 2.6.9.10rc1
Released December 23, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/betas/noscript-2.6.9.10rc1.xpi
==========================================================================
x Fixed private windows detection for UI adaptation broken in
SeaMonkey (thanks barbaz for reporting)
x Made the Permanent "allow" commands in private windows'
checkbox look and behave like the other options in the
"Appearance" tab, i.e. controlling the visibility of the
menu item by the same name
v 2.6.9.9
Released December 19, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/releases/noscript-2.6.9.9.xpi
==========================================================================
x Updated GPL.txt and NoScript_License.txt with current FSF
information (thanks Thomas Spura for reporting)
x Fixed regression causing "Revoke temporary permissions"
gitches (thanks barbaz for reporting)
x Moved the Permanent "allow" commands in private windows'
menu toggle next to the 'Options' command
v 2.6.9.9rc1
Released December 17, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/betas/noscript-2.6.9.9rc1.xpi
==========================================================================
x Updated GPL.txt and NoScript_License.txt with current FSF
information (thanks Thomas Spura for reporting)
x Fixed regression causing "Revoke temporary permissions"
gitches (thanks barbaz for reporting)
x Moved the Permanent "allow" commands in private windows'
menu toggle next to the 'Options' command
v 2.6.9.8
Released December 16, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/releases/noscript-2.6.9.8.xpi
==========================================================================
+ 'Permanent "allow" commands in private windows' preference
in NoScript Options|Appearance (inverse of
noscript.volatilePrivatePermissions)
+ 'Permanent "allow" commands in private windows' toggle
in NoScript menu while in Private Browsing mode, controlled
by noscript.showVolatilePrivatePermissionsToggle
x Fixed regression in Cascade Permissions mode (thanks Kitty
Box for reporting)
+ Fixed whitelisting regression on Gecko 25 and below (e.g.
Palemoon)
+ Actually prevent temporary whitelist items from being saved
in prefs (thanks to Mike Perry)
v 2.6.9.8rc3
Released December 16, 2014 531.5 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/betas/noscript-2.6.9.8rc3.xpi
==========================================================================
+ 'Permanent "allow" commands in private windows' preference
in NoScript Options|Appearance (inverse of
noscript.volatilePrivatePermissions)
+ 'Permanent "allow" commands in private windows' toggle
in NoScript menu while in Private Browsing mode, controlled
by noscript.showVolatilePrivatePermissionsToggle
x Fixed regression in Cascade Permissions mode (thanks Kitty
Box for reporting)
v 2.6.9.8rc2
Released December 16, 2014 531.3 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.8rc2.xpi
==========================================================================
+ Fixed whitelisting regression on Gecko 25 and below (e.g.
Palemoon)
v 2.6.9.8rc1
Released December 15, 2014 531.3 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.8rc1.xpi
==========================================================================
+ Actually prevent temporary whitelist items from being saved
in prefs (thanks to Mike Perry)
v 2.6.9.7
Released December 15, 2014 531.2 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/releases/noscript-2.6.9.7.xpi
==========================================================================
x Fixed inconsistencies in the globalHttpsWhitelist option
implementation (thanks Mike Perry for reporting)
+ Volatile temporary whitelist, never gets saved to disk
(thanks to Tor Project for sponsorship)
+ Never show permanent whitelist modifying commands when in
private mode unless the noscript.volatilePrivatePermissions
preference is false (thanks to Tor Project for sponsorship)
+ noscript.allowWhitelistUpdate preference to control whether
NoScript should be able to tweak the whitelist on version
updates when the 3rd party requirements for an already
whitelisted website change (thanks Thencent for RFE)
v 2.6.9.7rc2
Released December 13, 2014 531.2 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.7rc2.xpi
==========================================================================
x Fixed inconsistencies in the globalHttpsWhitelist option
implementation (thanks Mike Perry for reporting)
v 2.6.9.7rc1
Released December 12, 2014 531.2 KiB; works with Firefox 3.0.9 - 38.0, SeaMonkey 2.0 - 2.35
https://secure.informaction.com/download/betas/noscript-2.6.9.7rc1.xpi
==========================================================================
+ Volatile temporary whitelist, never gets saved to disk
(thanks to Tor Project for sponsorship)
+ Never show permanent whitelist modifying commands when in
private mode, unless the oscript.volatilePrivatePermissions
preference is false (thanks to Tor Project for sponsorship)
+ noscript.allowWhitelistUpdate preference to control whether
NoScript should be able to tweak the whitelist on version
updates when the 3rd party requirements for an already
whitelisted website change (thanks Thencent for RFE)
v 2.6.9.6
Released December 04, 2014 530.9 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/releases/noscript-2.6.9.6.xpi
==========================================================================
+ Built-in force HTTPS list, seeded with www.youtube.com
x Work-around for bogus Youtube embedded frame activation
patterns (thanks al_9x for reporting)
x Fixed bookmarklet execution regression in older Firefox
versions (thanks 5keeve for reporting)
x Fixed subdocuments of a [System Principal] page not being
allowed when they should in cascade permission modes (
thanks hjkl for reporting)
v 2.6.9.6rc3
Released December 03, 2014 531.0 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.6rc3.xpi
==========================================================================
+ Built-in force HTTPS list, seeded with www.youtube.com
x Work-around for bogus Youtube embedded frame activation
patterns (thanks al_9x for reporting)
v 2.6.9.6rc2
Released December 03, 2014 530.7 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.6rc2.xpi
==========================================================================
x Fixed bookmarklet execution regression in older Firefox
versions (thanks 5keeve for reporting)
v 2.6.9.6rc1
Released November 26, 2014 530.7 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.6rc1.xpi
==========================================================================
x Fixed subdocuments of a [System Principal] page not being
allowed when they should in cascade permission modes (
thanks hjkl for reporting)
v 2.6.9.5
Released November 24, 2014 530.6 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/releases/noscript-2.6.9.5.xpi
==========================================================================
x Fixed memory leak when a top-level browser window is closed
(thanks cks for reporting)
x [XSS] compatibility tweak for swisspost.ch
x Miscellaneous HTTPS URLs lockdown
+ Support for full-encrypted https://noscript.net
x Updated Twitter surrogate (thanks ozjuggler and barbaz)
x Work-around for thumbnail generation protection being
broken by some add-ons
x Fully disable background processed thumbnail generation
unless noscript.bgThumbs.allowed about:config preference
is set to true
x Control JavaScript enabled in background thumbail
generation through the noscript.bgThumbs.disableJS
about:config preference
+ Forcing remote browsers used for thumbnail generation to
disable JavaScript (thanks vpoint for reporting)
+ [Surrogate] Invodo dummy replacement (thanks barbaz)
v 2.6.9.5rc3
Released November 24, 2014 530.7 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.5rc3.xpi
==========================================================================
x Fixed memory leak when a top-level browser window is closed
(thanks cks for reporting)
x [XSS] compatibility tweak for swisspost.ch
x Miscellaneous HTTPS URLs lockdown
v 2.6.9.5rc2
Released November 22, 2014 530.7 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.5rc2.xpi
==========================================================================
+ Support for full-encrypted https://noscript.net
x Updated Twitter surrogate (thanks ozjuggler and barbaz)
x Work-around for thumbnail generation protection being
broken by some add-ons
x Fully disable background processed thumbnail generation
unless noscript.bgThumbs.allowed about:config preference
is set to true
x Control JavaScript enabled in background thumbail
generation through the noscript.bgThumbs.disableJS
about:config preference
v 2.6.9.5rc1
Released November 17, 2014 530.5 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.5rc1.xpi
==========================================================================
+ Forcing remote browsers used for thumbnail generation to
disable JavaScript (thanks vpoint for reporting)
+ [Surrogate] Invodo dummy replacement (thanks barbaz)
v 2.6.9.4
Released November 15, 2014 530.2 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/releases/noscript-2.6.9.4.xpi
==========================================================================
+ Added vimeocdn.com as a vimeo.com dependency if already
whitelisted
+ [Surrogate] Enabling imgserve.com age verification button
even if JavaScript is disabled
x Fixed IP6 to IP4 mapping bug (thanks stack / inventati)
v 2.6.9.4rc1
Released November 14, 2014 530.2 KiB; works with Firefox 3.0.9 - 37.0, SeaMonkey 2.0 - 2.34
https://secure.informaction.com/download/betas/noscript-2.6.9.4rc1.xpi
==========================================================================
+ Added vimeocdn.com as a vimeo.com dependency if already
whitelisted
+ [Surrogate] Enabling imgserve.com age verification button
even if JavaScript is disabled
x Fixed IP6 to IP4 mapping bug (thanks stack / inventati)
v 2.6.9.3
Released October 23, 2014 530.2 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/releases/noscript-2.6.9.3.xpi
==========================================================================
x More accurate referrer checks for some edge cases (thanks
AlbertMTom for reporting)
x [ABE] More restrictive local IP checks (thanks AlbertMTom
for reporting)
+ More permissive AddressMatcher IP parser
+ [XSS] Improved sensitivity (thanks Masato Kinugawa)
v 2.6.9.3rc3
Released October 23, 2014 530.2 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/betas/noscript-2.6.9.3rc3.xpi
==========================================================================
x More accurate referrer checks for some edge cases (thanks
AlbertMTom for reporting)
x Fixed regression in LOCAL IP matching for 192.168.0.0/16
(thanks barbaz for reporting)
v 2.6.9.3rc2
Released October 23, 2014 530.2 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/betas/noscript-2.6.9.3rc2.xpi
==========================================================================
x [ABE] More restrictive local IP checks (thanks AlbertMTom
for reporting)
+ More permissive AddressMatcher IP parser
v 2.6.9.3rc1
Released October 18, 2014 530.1 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/betas/noscript-2.6.9.3rc1.xpi
==========================================================================
+ [XSS] Improved sensitivity (thanks Masato Kinugawa)
v 2.6.9.2
Released October 18, 2014 530.0 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/releases/noscript-2.6.9.2.xpi
==========================================================================
+ [XSS] Improved sensitivity (thanks Masato Kinugawa)
v 2.6.9.2rc3
Released October 18, 2014 530.0 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/betas/noscript-2.6.9.2rc3.xpi
==========================================================================
+ [XSS] Improved sensitivity (thanks Masato Kinugawa)
v 2.6.9.2rc2
Released October 16, 2014 530.1 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9.2rc2.xpi
==========================================================================
+ [XSS] Improved sensitivity (thanks Masato Kinugawa)
v 2.6.9.2rc1
Released October 16, 2014 530.0 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9.2rc1.xpi
==========================================================================
+ [XSS] Improved sensitivity (thanks Masato Kinugawa)
v 2.6.9.1
Released October 13, 2014 530.0 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.9.1.xpi
==========================================================================
+ [XSS] focus-based exfiltration protection (thanks Masato
Kinugawa for reporting)
x [XSS] Fixed false positive in risky operators detection
(thanks Roman Vock for reporting)
v 2.6.9.1rc2
Released October 10, 2014 530.0 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9.1rc2.xpi
==========================================================================
+ [XSS] Improved focus-based exfiltration protection
v 2.6.9.1rc1
Released October 10, 2014 530.0 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9.1rc1.xpi
==========================================================================
+ [XSS] focus-based exfiltration protection (thanks Masato
Kinugawa for reporting)
x [XSS] Fixed false positive in risky operators detection
(thanks Roman Vock for reporting)
v 2.6.9
Released October 05, 2014 529.9 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.9.xpi
==========================================================================
+ [XSS] Improved location-based exfiltration protection
(thanks Masato Kinugawa for reporting)
+ [Surrogate] login.person.org inclusion (thanks barbaz)
x [XSS] Fixed 2.6.8.43 regressions
x [XSS] Improved specificity for eval-like patterns
+ Switched to a treeview for faster management of very long
whitelists (thanks barbaz for patch)
x Tentative work-around for potential performance problems
reportedly related to Australis support
v 2.6.9rc4
Released October 05, 2014 530.0 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9rc4.xpi
==========================================================================
+ [XSS] Fixed bug in location-based exfiltration protection
(thanks Masato Kinugawa for reporting)
v 2.6.9rc3
Released October 03, 2014 529.9 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9rc3.xpi
==========================================================================
+ [XSS] Improved location-based exfiltration protection
(thanks Masato Kinugawa for reporting)
v 2.6.9rc2
Released October 02, 2014 529.9 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.9rc2.xpi
==========================================================================
+ [Surrogate] login.person.org inclusion (thanks barbaz)
x [XSS] Fixed 2.6.8.43 regressions
x [XSS] Improved specificity for eval-like patterns
v 2.6.9rc1
Released September 30, 2014 531.5 KiB; works with Firefox 3.0.9 - 36.0, SeaMonkey 2.0 - 2.33
https://secure.informaction.com/download/betas/noscript-2.6.9rc1.xpi
==========================================================================
+ Switched to a treeview for faster management of very long
whitelists (thanks barbaz for patch)
x Tentative work-around for potential performance problems
reportedly related to Australis support
x [XSS] Fixed 2.6.8.43 regressions
v 2.6.8.43
Released September 27, 2014 528.4 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.8.43.xpi
==========================================================================
x [XSS] Protection against some exfiltration attacks based on
arithmetic operators (thanks Masato Kinugawa and File
Descriptor AKA XSS Jigsaw for reporting)
v 2.6.8.43rc2
Released September 27, 2014 528.5 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.43rc2.xpi
==========================================================================
x [XSS] Fixed rc1 regression (thanks Masato Kinugawa for
reporting)
v 2.6.8.43rc1
Released September 26, 2014 528.4 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.43rc1.xpi
==========================================================================
x [XSS] Protection against some exfiltration attacks based on
arithmetic operators (thanks Masato Kinugawa and File
Descriptor AKA XSS Jigsaw for reporting)
v 2.6.8.42
Released September 22, 2014 528.3 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.8.42.xpi
==========================================================================
+ User-facing "Reload the current tab only" option
x Fixed subtle bug in ScriptSurrogate.replaceScript()
x Fixed HTTPS and cascading permission policies not applying
to XHR and XBL checks
x [XSS] Fixed ES6-based bypasses (thanks Masato Kinugawa for
reporting)
+ [XSS] window.name exfiltration protection (thanks Masato
Kinugawa for reporting)
x Fixed script sources enumeration breakage in Firefox 35
(Moz Bug 1068508, thanks Octoploid for reporting)
v 2.6.8.42rc3
Released September 22, 2014 528.3 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.42rc3.xpi
==========================================================================
+ User-facing "Reload the current tab only" option
x [XSS] Improved window.name exfiltration protection
(thanks Masato Kinugawa for reporting)
v 2.6.8.42rc2
Released September 21, 2014 528.1 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.42rc2.xpi
==========================================================================
x Fixed subtle bug in ScriptSurrogate.replaceScript()
x Fixed HTTPS and cascading permission policies not applying
to XHR and XBL checks
x [XSS] Fixed ES6-based bypasses (thanks Masato Kinugawa for
reporting)
+ [XSS] window.name exfiltration protection (thanks Masato
Kinugawa for reporting)
v 2.6.8.42rc1
Released September 17, 2014 527.8 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.42rc1.xpi
==========================================================================
x Fixed script sources enumeration breakage in Firefox 35
(Moz Bug 1068508, thanks Octoploid for reporting)
v 2.6.8.41
Released September 11, 2014 527.7 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.8.41.xpi
==========================================================================
x Improved Australis toolbar compatibility (thanks Quicksaver
for help)
x Added "Always ask" checkbox to the removal confirmation
dialog (thanks agaxwtmp for RFE)
x Fixed Options dialog broken on ancient Firefox versions
x [XSS] Fixed false positive within *.adxns.com
v 2.6.8.41rc3
Released September 11, 2014 527.8 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.41rc3.xpi
==========================================================================
x Improved Australis toolbar compatibility (thanks Quicksaver
for help)
v 2.6.8.41rc2
Released September 11, 2014 527.7 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.41rc2.xpi
==========================================================================
x Added "Always ask" checkbox to the removal confirmation
dialog (thanks agaxwtmp for RFE)
x Fixed Options dialog broken on ancient Firefox versions
v 2.6.8.41rc1
Released September 10, 2014 527.7 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.41rc1.xpi
==========================================================================
x Improved Australis toolbar compatibility (thanks Quicksaver
for patch)
x [XSS] Fixed false positive within *.adxns.com
v 2.6.8.40
Released September 01, 2014 529.0 KiB; works with Firefox 4.0 - 35.0, SeaMonkey 2.12 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.8.40.xpi
==========================================================================
x Fixed regression causing script inclusions with non-standard ports to
be always blocked
x [ABE] Improved ruleset editing UI (thanks barbaz for patch)
v 2.6.8.40rc2
Released August 31, 2014 529.0 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.40rc2.xpi
==========================================================================
x Fixed regression causing script inclusions with non-standard ports to
be always blocked
v 2.6.8.40rc1
Released August 27, 2014 528.9 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.40rc1.xpi
==========================================================================
x [ABE] Improved ruleset editing UI (thanks barbaz for patch)
v 2.6.8.39
Released August 26, 2014 527.2 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.39.xpi
==========================================================================
x [Surrogate] Removed DARLA surrogate and reimplemented its work-around
as a XSS filter exception
x [Bookmarklets] Fixed bookmarklets broken when JavaScript is enabled
(thanks therube for reporting)
x [Surrogate] Work-around for DARLA surrogate breaking Yahoo! Mail
v 2.6.8.39rc2
Released August 26, 2014 527.2 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.39rc2.xpi
==========================================================================
x [Surrogate] Removed DARLA surrogate and reimplemented its work-around
as a XSS filter exception
x [Bookmarklets] Fixed bookmarklets broken when JavaScript is enabled
(thanks therube for reporting)
v 2.6.8.39rc1
Released August 26, 2014 527.3 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.39rc1.xpi
==========================================================================
x [Surrogate] Work-around for DARLA surrogate breaking Yahoo! Mail
v 2.6.8.38
Released August 24, 2014 527.1 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.8.38.xpi
==========================================================================
x Fixed regression preventing Youtube movies from playing
x Completed work-around for Firefox's Bug 1044351
x [Surrogate] Improved Yahoo! DARLA source matching
v 2.6.8.38rc2
Released August 24, 2014 527.0 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.38rc2.xpi
==========================================================================
x Fixed regression preventing Youtube movies from playing
v 2.6.8.38rc1
Released August 24, 2014 527.1 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.38rc1.xpi
==========================================================================
x Completed work-around for Firefox's Bug 1044351
x [Surrogate] Improved Yahoo! DARLA source matching
v 2.6.8.37
Released August 24, 2014 527.0 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/releases/noscript-2.6.8.37.xpi
==========================================================================
x Made the new additional script blocking policies more consistent with
other features (e.g. the XSS filter)
x NoScript's toolbar button is now friendlier to other Australis-enabled
add-ons
x Work-around for Firefox's Bug 1044351 (thanks al_9x for RFE)
x [XSS] Support for new insidious ES6 constructs introduced in Firefox 34
(thanks .mario for reporting)
x [HTTPS] Experimental "Allow HTTPS scripts globally on HTTPS documents"
mode
x [Surrogate] Yahoo! "DARLA" ads loader post-execution surrogate prevents
the browser from stalling due to the many window.name-based XSSes
intentionally used by this ads delivery script
v 2.6.8.37rc3
Released August 24, 2014 527.0 KiB; works with Firefox 3.0.9 - 35.0, SeaMonkey 2.0 - 2.32
https://secure.informaction.com/download/betas/noscript-2.6.8.37rc3.xpi
==========================================================================
x Made the new additional script blocking policies more consistent with
other features (e.g. the XSS filter)
x NoScript's toolbar button is now friendlier to other Australis-enabled
add-ons
x Work-around for Firefox's Bug 1044351 (thanks al_9x for RFE)
v 2.6.8.37rc2
Released August 19, 2014 526.8 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.37rc2.xpi
==========================================================================
x [XSS] Support for new insidious ES6 constructs introduced in Firefox 34
(thanks .mario for reporting)
x [HTTPS] Experimental "Allow HTTPS scripts globally on HTTPS documents"
mode
v 2.6.8.37rc1
Released July 29, 2014 526.1 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.37rc1.xpi
==========================================================================
x [Surrogate] Yahoo! "DARLA" ads loader post-execution surrogate prevents
the browser from stalling due to the many window.name-based XSSes
intentionally used by this ads delivery script
v 2.6.8.36
Released July 28, 2014 526.0 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/releases/noscript-2.6.8.36.xpi
==========================================================================
x [Surrogate] Updated adf.ly replacement (thanks kasper93 for coding)
x [Surrogate] Updated connect.facebook.net replacement
x Fixed bookmarklet emulation compatibility issue breaking some add-ons
which rely on the new getShortcutOrURIAndPostData() function signature
x Fixed regression causing preventing the Blocked Objects list from being
manually reset
v 2.6.8.36rc1
Released July 25, 2014 526.1 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.36rc1.xpi
==========================================================================
x [Surrogate] Updated adf.ly replacement (thanks kasper93 for coding)
x [Surrogate] Updated connect.facebook.net replacement
x Fixed bookmarklet emulation compatibility issue breaking some add-ons
which rely on the new getShortcutOrURIAndPostData() function signature
v 2.6.8.35
Released July 24, 2014 526.0 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/releases/noscript-2.6.8.35.xpi
==========================================================================
x Improved compatibility with browser built-in Click To Play
+ Recently blocked sites are now recorded per-window (causing automatic
oblivion of data from Private Browsing windows when they're closed)
+ Recently blocked sites are not collected at all unless the menu item
is configured to be shown (thanks Barbaz for RFE and patch)
v 2.6.8.35rc2
Released July 24, 2014 526.0 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.35rc2.xpi
==========================================================================
x Improved compatibility with browser built-in Click To Play
v 2.6.8.35rc1
Released July 23, 2014 541.7 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.35rc1.xpi
==========================================================================
+ Recently blocked sites are now recorded per-window (causing automatic
oblivion of data from Private Browsing windows when they're closed)
+ Recently blocked sites are not collected at all unless the menu item
is configured to be shown (thanks Barbaz for RFE and patch)
v 2.6.8.34
Released July 17, 2014 541.6 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/releases/noscript-2.6.8.34.xpi
==========================================================================
x Added "cdn.directvid.com/*.jsx" to inclusionTypeChecking.exceptions in
in order to let the directvid video player work
x Better compatibility with null principal origins created by the
Add-on SDK (thanks neilemon for reporting)
v 2.6.8.34rc1
Released July 17, 2014 541.6 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.34rc1.xpi
==========================================================================
x Added "cdn.directvid.com/*.jsx" to inclusionTypeChecking.exceptions in
in order to let the directvid video player work
x Better compatibility with null principal origins created by the
Add-on SDK (thanks neilemon for reporting)
v 2.6.8.33
Released July 08, 2014 525.8 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/releases/noscript-2.6.8.33.xpi
==========================================================================
x Fixed regression in smart reloading of just allowed HTML Media elements
(thanks barbaz for reporting)
v 2.6.8.33rc1
Released July 08, 2014 525.9 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.33rc1.xpi
==========================================================================
x Fixed regression in smart reloading of just allowed HTML Media elements
(thanks barbaz for reporting)
v 2.6.8.32
Released July 07, 2014 526 KiB Works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/releases/noscript-2.6.8.32.xpi
==========================================================================
x Fixed regression: NOSCRIPT element not shown on non-whitelisted pages
(thanks Germán Ponte and Michael Kehrein for reporting)
x Replaced Ci.nsIDOMHTML(Video|Audio)Element (about to be removed) with
window.(Video|Audio)Element counterparts (see Moz Bug 1034304)
x Fixed jammed icon on the navigation bar when "left clicking on toolbar
icon toggles..." option is checked (thanks Larry for reporting)
v 2.6.8.32rc3
Released July 07, 2014 1.0 MiB Works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.32rc3.xpi
==========================================================================
x Fixed regression: NOSCRIPT element not shown on non-whitelisted pages
(thanks Germán Ponte and Michael Kehrein for reporting)
v 2.6.8.32rc2
Released July 06, 2014 1.0 MiB Works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.32rc2.xpi
==========================================================================
x Replaced Ci.nsIDOMHTML(Video|Audio)Element (about to be removed) with
window.(Video|Audio)Element counterparts (see Moz Bug 1034304)
v 2.6.8.32rc1
Released July 04, 2014 525.8 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31
https://secure.informaction.com/download/betas/noscript-2.6.8.32rc1.xpi
==========================================================================
x Fixed jammed icon on the navigation bar when "left clicking on toolbar
icon toggles..." option is checked (thanks Larry for reporting)
v 2.6.8.31
Released June 30, 2014 525.8 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31a2
https://secure.informaction.com/download/releases/noscript-2.6.8.31.xpi
==========================================================================
x Updated HTML5 and Gecko-specific markup elements list
x Fixed "too much recursion" book in bookmarklet emulation when executing
window.open(..., "_self") (thanks al_9x)
x Improved icons consistence with cascading permissions
x Fixed 2.6.8.30rc1 regression: broken local file loads
x Make "[Temporarily] Allow all this page" affect only the top-level
document's origin when cascading permissions mode is enabled
x [Surrogate] Fixed regression about a small change in sandbox principal
management breaking some surrogates, including Google Analytics
x [CAPS] better compatibility with Firefox 30's restored checkloaduri
prefs hack
+ UI support for cascadePermissions and restrictSubdocScripting
+ "NoScript Options|Advanced|Trusted|Cascade top document's permissions
to 3rd party scripts" user-facing preference
+ "NoScript Options|Advanced|Untrusted|Block scripting in whitelisted
subdocuments of non-whitelisted pages" user-facing preference
+ Backported cascadePermissions and restrictSubdocScripting support to
ESR 24
v 2.6.8.31rc1
Released June 30, 2014 525.8 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31a2
https://secure.informaction.com/download/betas/noscript-2.6.8.31rc1.xpi
==========================================================================
x Fixed a regression in bookmarklet emulation (typo spotted by al_9x)
v 2.6.8.30rc5
Released June 30, 2014 525.8 KiB; works with Firefox 3.0.9 - 34.0, SeaMonkey 2.0 - 2.31a2
https://secure.informaction.com/download/betas/noscript-2.6.8.30rc5.xpi
==========================================================================
x Updated HTML5 and Gecko-specific markup elements list
x Fixed "too much recursion" book in bookmarklet emulation when executing
window.open(..., "_self") (thanks al_9x)
v 2.6.8.30rc4
Released June 25, 2014 525.7 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.30rc4.xpi
==========================================================================
x Improved icons consistence with cascading permissions
x Fixed 2.6.8.30rc1 regression: broken local file loads
v 2.6.8.30rc3
Released June 25, 2014 525.6 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.30rc3.xpi
==========================================================================
x Make "[Temporarily] Allow all this page" affect only the top-level
document's origin when cascading permissions mode is enabled
v 2.6.8.30rc2
Released June 25, 2014 525.5 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.30rc2.xpi
==========================================================================
x [Surrogate] Fixed regression about a small change in sandbox principal
management breaking some surrogates, including Google Analytics
v 2.6.8.30rc1
Released June 25, 2014 525.6 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.30rc1.xpi
==========================================================================
x [CAPS] better compatibility with Firefox 30's restored checkloaduri
prefs hack
+ UI support for cascadePermissions and restrictSubdocScripting
+ "NoScript Options|Advanced|Trusted|Cascade top document's permissions
to 3rd party scripts" user-facing preference
+ "NoScript Options|Advanced|Untrusted|Block scripting in whitelisted
subdocuments of non-whitelisted pages" user-facing preference
+ Backported cascadePermissions and restrictSubdocScripting support to
ESR 24
v 2.6.8.29
Released June 23, 2014 504.0 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/releases/noscript-2.6.8.29.xpi
==========================================================================
x [Surrogate] googletagservices.com replacement (thanks Guest and barbaz)
x Fixed bookmarklet emulation "Object.getPrototypeOf(...).open is
undefined" failure on Nightly (thanks Ria and barbaz for reporting)
v 2.6.8.29rc1
Released June 08, 2014 523.9 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.29rc1.xpi
==========================================================================
x [Surrogate] googletagservices.com replacement (thanks Guest and barbaz)
x Fixed bookmarklet emulation "Object.getPrototypeOf(...).open is
undefined" failure on Nightly (thanks Ria and barbaz for reporting)
v 2.6.8.28
Released June 03, 2014 521.1 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/releases/noscript-2.6.8.28.xpi
==========================================================================
x Fixed bookmarklet execution on non-whitelisted page causing scripts
to be globally allowed (thanks barbaz and therube for reporting)
v 2.6.8.28rc1
Released June 03, 2014 521.0 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.28rc1.xpi
==========================================================================
x Fixed bookmarklet execution on non-whitelisted page causing scripts
to be globally allowed (thanks barbaz and therube for reporting)
v 2.6.8.27
Released June 03, 2014 520.9 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/releases/noscript-2.6.8.27.xpi
==========================================================================
x Work-around for bug 1005552 (backport to ESR)
+ [Surrogate] External script surrogates are now triggered whenever a
matching script fails to load, no matter the reason, e.g. NoScript
permissions, ABE, ABP or RequestPolicy (thanks bonanza for RFE)
x [XSS] Worked around OpenID-related false positive (thanks Gunnar for
reporting)
x [XSS] Better work around for false positive in gmx.com new webmail,
designed to work across all its implementations
v 2.6.8.27rc3
Released May 31, 2014 521.0 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.27rc3.xpi
==========================================================================
x [Surrogate] Better trigger timing
x Work-around for bug 1005552 (backport to ESR)
v 2.6.8.27rc2
Released May 31, 2014 520.9 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.27rc2.xpi
==========================================================================
+ [Surrogate] External script surrogates are now triggered whenever a
matching script fails to load, no matter the reason, e.g. NoScript
permissions, ABE, ABP or RequestPolicy (thanks bonanza for RFE)
v 2.6.8.27rc1
Released May 29, 2014 521.2 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.27rc1.xpi
==========================================================================
x [XSS] Worked around OpenID-related false positive (thanks Gunnar for
reporting)
x [XSS] Better work around for false positive in gmx.com new webmail,
designed to work across all its implementations
v 2.6.8.26
Released May 27, 2014 520.8 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/releases/noscript-2.6.8.26.xpi
==========================================================================
x [XSS] gmx.com false positive work-around extended to international
domains (thanks dood_97 for reporting)
x [XSS] gmx.com false positive work-around extended to mail.com (thanks
boris for reporting)
+ noscript.cascadePermissions preliminary backend implementation
+ noscript.restrictSubdocScripting preliminary backend implementation
v 2.6.8.26rc1
Released May 23, 2014 520.8 KiB; works with Firefox 3.0.9 - 33.0, SeaMonkey 2.0 - 2.30
https://secure.informaction.com/download/betas/noscript-2.6.8.26rc1.xpi
==========================================================================
x [XSS] gmx.com false positive work-around extended to international
domains (thanks dood_97 for reporting)
x [XSS] gmx.com false positive work-around extended to mail.com (thanks
boris for reporting)
+ noscript.cascadePermissions preliminary backend implementation
+ noscript.restrictSubdocScripting preliminary backend implementation
v 2.6.8.25
Released May 21, 2014 520.8 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/releases/noscript-2.6.8.25.xpi
==========================================================================
x [ABE] Fixed inability to discriminate loads inititated from the URL bar
on latest Nightlies (thanks Soothsayer for reporting)
x [XSS] Fixed false positive on new gmx.com login (thanks Luigi and LeeB
for reporting)
x [Surrogate] Fixed new google-analytics.com surrogate causing Google
Spreadsheet's columns not to be resizable (thanks bobbybrown for
reporting)
v 2.6.8.25rc2
Released May 21, 2014 520.8 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.25rc2.xpi
==========================================================================
x [ABE] Fixed inability to discriminate loads inititated from the URL bar
on latest Nightlies (thanks Soothsayer for reporting)
x [XSS] Improved fix for false positive on new gmx.com login (thanks
Luigi and LeeB for reporting)
v 2.6.8.25rc1
Released May 19, 2014 520.8 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.25rc1.xpi
==========================================================================
x [Surrogate] Fixed new google-analytics.com surrogate causing Google
Spreadsheet's columns not to be resizable (thanks bobbybrown for
reporting)
x [XSS] Fixed false positive on new gmx.com login (thanks Luigi for
reporting)
v 2.6.8.24
Released May 14, 2014 520.6 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/releases/noscript-2.6.8.24.xpi
==========================================================================
+ Synthetic load events are sent and error events are suppressed for
blocked script elements, in order to work around strict script
inclusion enforcers. This feature is triggered by default only by
Require.js module imports, but can be fully configured by
noscript.fakeScriptLoadEvents.* about:config preferences:
* .enabled: switches this feature on/off
* .onlyRequireJS: if true (default) applies the feature only to script
inclusions initiated by Require.js
* .exceptions: AddressMatcher pattern matching the source URLs of
script elements which should not cause fake load events when blocked
* .docExceptions: AddressMatcher pattern matching the URLs of documents
where no fake load event must be raised
x Improved toStaticHTML() implementation (thanks .mario for reporting)
x Removed useless ICC profiles from some icons (thanks taffit for RFE)
x [Surrogate] Improved google-analytics.com (ga) surrogate
x [XSS] Fixed characters redundancy reduction bug (thanks Masato Kinugawa
for reporting)
x [XSS] Fixed typo in the new regular expression literals stripping
routine implementation (thanks Masato Kinugawa for reporting)
x [XSS] Fixed subtle bug in regular expression literals stripping
optimization, potentially causing false negatives in edge cases (thanks
Masato Kinugawa for reporting)
x Work-around for Firefox bug causing popup.hidePopup() to fail sometimes
and NoScript's on-hover menu needing a click to be closed
v 2.6.8.24rc5
Released May 14, 2014 520.6 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.24rc5.xpi
==========================================================================
+ More flexible implementation of the fake script load events feature,
triggered by default only by Require.js module imports, can be fully
configured by noscript.fakeScriptLoadEvents.* about:config preferences:
* .enabled: switches this feature on/off
* .onlyRequireJS: if true (default) applies the feature only to script
inclusions initiated by Require.js
* .exceptions: AddressMatcher pattern matching the source URLs of
script elements which should not cause fake load events when blocked
* .docExceptions: AddressMatcher pattern matching the URLs of documents
where no fake load event must be raised
v 2.6.8.24rc4
Released May 14, 2014 520.4 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.24rc4.xpi
==========================================================================
+ Synthetic load events are sent and error events are suppressed for
blocked script elements, in order to work around strict script
inclusion enforcers such as Require.js (this feature is configured by
the noscript.fakeScriptLoadEvents about:config preference)
x Improved toStaticHTML() implementation (thanks .mario for reporting)
x Removed useless ICC profiles from some icons (thanks taffit for RFE)
x [Surrogate] Improved google-analytics.com (ga) surrogate
v 2.6.8.24rc3
Released May 11, 2014 525.9 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.24rc3.xpi
==========================================================================
x [XSS] Fixed characters redundancy reduction bug (thanks Masato Kinugawa
for reporting)
v 2.6.8.24rc2
Released May 10, 2014 525.7 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.24rc2.xpi
==========================================================================
x [XSS] Fixed typo in the new regular expression literals stripping
routine implementation (thanks Masato Kinugawa for reporting)
v 2.6.8.24rc1
Released May 10, 2014 525.7 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.24rc1.xpi
==========================================================================
x [XSS] Fixed subtle bug in regular expression literals stripping
optimization, potentially causing false negatives in edge cases (thanks
Masato Kinugawa for reporting)
v 2.6.8.23
Released May 04, 2014 525.5 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/releases/noscript-2.6.8.23.xpi
==========================================================================
x Work-around for Firefox bug causing popup.hidePopup() to fail sometimes
and NoScript's on-hover menu needing a click to be closed
v 2.6.8.23rc1
Released May 04, 2014 525.6 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.23rc1.xpi
==========================================================================
x Work-around for Firefox bug causing popup.hidePopup() to fail sometimes
and NoScript's on-hover menu needing a click to be closed
v 2.6.8.22
Released May 04, 2014 525.7 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/releases/noscript-2.6.8.22.xpi
==========================================================================
x Better algorithm for menu items ordering
v 2.6.8.22rc1
Released May 04, 2014 525.5 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.22rc1.xpi
==========================================================================
x Better algorithm for menu items ordering
v 2.6.8.21
Released May 03, 2014 525.5 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/releases/noscript-2.6.8.21.xpi
==========================================================================
x Fixed XSL check regression (thanks barbaz for reporting)
x Work-around for bug 1005552
+ [Surrogate] Gravatar dummy replacement
x [Australis] Support for reversed menu on surrogate status/addon bars
v 2.6.8.21rc2
Released May 03, 2014 525.5 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.21rc2.xpi
==========================================================================
x Fixed XSL check regression (thanks barbaz for reporting)
x Work-around for bug 1005552
v 2.6.8.21rc1
Released April 29, 2014 525.5 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.21rc1.xpi
==========================================================================
+ [Surrogate] Gravatar dummy replacement
x [Australis] Support for reversed menu on surrogate status/addon bars
v 2.6.8.20
Released April 14, 2014 525.3 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/releases/noscript-2.6.8.20.xpi
==========================================================================
x Partially restored "Allow local links" functionality (works for HTML
file:// links but not for embedded resources and scripted loads)
+ "allowLocalLinks.from" about:config preference to define a whitelist
(in ABE URL pattern list syntax) which, if valid and not empty,
overrides the JavaScript whitelist which is reused by legacy default
for pages allowed to open file:// links (Gecko 28 and above)
+ "allowLocalLinks.to" about:config preference to define a whitelist
(in ABE URL pattern list syntax) which, if valid and not empty,
limits the file:// links which can be opened by allowed pages
(Gecko 28 and above)
- Removed "Allow rich text copy and paste from external clipboard" option
from the UI if the browser doesn't support CAPS (Gecko 28 and above)
x Implemented early permission changes enforcement on not yet reloaded
pages, to better match the old CAPS-based behavior (thanks therube
for reporting)
x [Surrogates] Fixed Google Analytics surrogate breaking some javascript:
links (thanks Will for reporting)
x [L18n] Fixed Finnish typo (thanks Kalle Niemitalo for reporting)
x [XSS] Removed OAuth-triggered false positive (thanks Gunnar Scherf for
reporting)
x [XSS] Stricter checks for HTTPS requests from a same domain origin with
different scheme (thanks LouiseRBaldwin for reporting)
v 2.6.8.20rc3
Released April 14, 2014 525.5 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.20rc3.xpi
==========================================================================
x Partially restored "Allow local links" functionality (works for HTML
file:// links but not for embedded resources and scripted loads)
+ "allowLocalLinks.from" about:config preference to define a whitelist
(in ABE URL pattern list syntax) which, if valid and not empty,
overrides the JavaScript whitelist which is reused by legacy default
for pages allowed to open file:// links (Gecko 28 and above)
+ "allowLocalLinks.to" about:config preference to define a whitelist
(in ABE URL pattern list syntax) which, if valid and not empty,
limits the file:// links which can be opened by allowed pages
(Gecko 28 and above)
- Removed "Allow rich text copy and paste from external clipboard" option
from the UI if the browser doesn't support CAPS (Gecko 28 and above)
v 2.6.8.20rc2
Released April 14, 2014 524.8 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.20rc2.xpi
==========================================================================
x Implemented early permission changes enforcement on not yet reloaded
pages, to better match the old CAPS-based behavior (thanks therube
for reporting)
v 2.6.8.20rc1
Released April 12, 2014 525.0 KiB; works with Firefox 3.0.9 - 32.0, SeaMonkey 2.0 - 2.29
https://secure.informaction.com/download/betas/noscript-2.6.8.20rc1.xpi
==========================================================================
x [Surrogates] Fixed Google Analytics surrogate breaking some javascript:
links (thanks Will for reporting)
x [L18n] Fixed Finnish typo (thanks Kalle Niemitalo for reporting)
x [XSS] Removed OAuth-triggered false positive (thanks Gunnar Scherf for
reporting)
x [XSS] Stricter checks for HTTPS requests from a same domain origin with
different scheme (thanks LouiseRBaldwin for reporting)
v 2.6.8.19
Released March 24, 2014 524.7 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/releases/noscript-2.6.8.19.xpi
==========================================================================
x Fixed CAPS initialization broken in Gecko 27 and below
x Fixed wildcard port matching broken in Gecko 28 and below
v 2.6.8.19rc2
Released March 24, 2014 524.8 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.19rc2.xpi
==========================================================================
x Fixed CAPS initialization broken in Gecko 27 and below
v 2.6.8.19rc1
Released March 23, 2014 525.0 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.19rc1.xpi
==========================================================================
x Fixed wildcard port matching broken in Gecko 28 and below
v 2.6.8.18
Released March 23, 2014 524.7 KiB; works with Firefox 28.0 - 31.0, SeaMonkey 2.26 - 2.28
https://secure.informaction.com/download/releases/noscript-2.6.8.18.xpi
==========================================================================
x Fixed some bookmarklets being broken by Gecko 28
x [Surrogate] Fixed some surrogates being broken by Gecko 28
- Disabled CAPS-based script blocking for Gecko 28 and above
x Fixed XSLT blocking broken by recent Gecko changes (thanks Xenos for
reporting)
v 2.6.8.18rc2
Released March 23, 2014 524.7 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.18rc2.xpi
==========================================================================
x Fixed some bookmarklets being broken by Gecko 28
x [Surrogate] Fixed some surrogates being broken by Gecko 28
- Disabled CAPS-based script blocking for Gecko 28 and above
v 2.6.8.18rc1
Released March 10, 2014 524.6 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.18rc1.xpi
==========================================================================
x Fixed XSLT blocking broken by recent Gecko changes (thanks Xenos for
reporting)
v 2.6.8.17
Released March 02, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/releases/noscript-2.6.8.17.xpi
==========================================================================
x CSS tweak for Australis support (thanks Jared Wein)
x Fixed new bookmarklet execution module accidentally using X rays
wrappers and therefore failing to interact with expando variables
v 2.6.8.17rc1
Released March 01, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.17rc1.xpi
==========================================================================
x CSS tweak for Australis support (thanks Jared Wein)
x Fixed new bookmarklet execution module accidentally using X rays
wrappers and therefore failing to interact with expando variables
v 2.6.8.16
Released February 27, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/releases/noscript-2.6.8.16.xpi
==========================================================================
x Closing a placeholder doesn't collapse its space anymore, unless the
noscript.placeholderCollapseOnClose is set to true or the "Collapse
blocked objects" Embeddings option is checked (thanks Elmart for RFE)
x Further bookmarklet emulation improvements yet (thanks porl for RFEs)
v 2.6.8.16rc4
Released February 26, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.16rc4.xpi
==========================================================================
x Closing a placeholder doesn't collapse its space anymore, unless the
noscript.placeholderCollapseOnClose is set to true or the "Collapse
blocked objects" Embeddings option is checked (thanks Elmart for RFE)
v 2.6.8.16rc3
Released February 25, 2014 524.4 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.16rc3.xpi
==========================================================================
x Further bookmarklet emulation improvements yet (thanks porl for RFEs)
v 2.6.8.16rc2
Released February 24, 2014 524.8 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.16rc2.xpi
==========================================================================
x Further bookmarklet emulation improvements (thanks porl for testbed)
v 2.6.8.16rc1
Released February 23, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.16rc1.xpi
==========================================================================
x More faithful bookmarklet corner-cases emulation
v 2.6.8.15
Released February 22, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/releases/noscript-2.6.8.15.xpi
==========================================================================
x [Surrogate] Fixed bug preventing local filesystem replacements
(file:/// URLs) from being loaded
x [Surrogate] Fixed Surrogate sandbox being nuked and causing many web
pages to break
x Fixed various bookmarklet emulation regressions caused by Firefox 24
compatibility efforts (thanks porl for reporting)
x [L10n] Fixed double newline escaping in some localized strings (thanks
porl for reporting)
x [Surrogate] Fixed regression: some surrogates not being correctly
initialized (thanks barbaz for reporting)
x [Surrogate] Fixed replacements not being parsed as Unicode text
x Fixed listeners and timers in sandboxed non-whitelisted scripts on
Gecko 27 and above
x Work-around for Firefox 27 and above preventing bookmarklets from
attaching event listeners on non-whitelisted pages (thanks porl for
reporting)
v 2.6.8.15rc6
Released February 22, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.15rc6.xpi
==========================================================================
x [Surrogate] Fixed bug preventing local filesystem replacements
(file:/// URLs) from being loaded
x [Surrogate] Fixed Surrogate sandbox being nuked and causing many web
pages to break
v 2.6.8.15rc5
Released February 21, 2014 524.5 KiB; works with Firefox 3.0.9 - 31.0, SeaMonkey 2.0 - 2.28
https://secure.informaction.com/download/betas/noscript-2.6.8.15rc5.xpi
==========================================================================
x Fixed various bookmarklet emulation regressions caused by Firefox 24
compatibility efforts (thanks porl for reporting)
x [L10n] Fixed double newline escaping in some localized strings (thanks
porl for reporting)
v 2.6.8.15rc4
Released February 17, 2014 523.8 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.15rc4.xpi
==========================================================================
x [Surrogate] Fixed regression: some surrogates not being correctly
initialized (thanks barbaz for reporting)
v 2.6.8.15rc3
Released February 13, 2014 524.0 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.15rc3.xpi
==========================================================================
x [Surrogate] Fixed replacements not being parsed as Unicode text
v 2.6.8.15rc2
Released February 12, 2014 523.8 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.15rc2.xpi
==========================================================================
x Fixed listeners and timers in sandboxed non-whitelisted scripts on
Gecko 27 and above
v 2.6.8.15rc1
Released February 11, 2014 524.0 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.15rc1.xpi
==========================================================================
x Work-around for Firefox 27 and above preventing bookmarklets from
attaching event listeners on non-whitelisted pages (thanks porl for
reporting)
v 2.6.8.14
Released February 11, 2014 523.7 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/releases/noscript-2.6.8.14.xpi
==========================================================================
x Fixed bookmarklet execution disabling JavaScript on whitelisted pages
(Firefox >= 29, thanks vsemozhetbyt for reporting mozbug 970445)
x [ABE] Improved compatibility with .local domains (thanks func0der for
reporting)
v 2.6.8.14rc2
Released February 11, 2014 523.9 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.14rc2.xpi
==========================================================================
x Fixed bookmarklet execution disabling JavaScript on whitelisted pages
(Firefox >= 29, thanks vsemozhetbyt for reporting mozbug 970445)
v 2.6.8.14rc1
Released January 28, 2014 523.7 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.14rc1.xpi
==========================================================================
x [ABE] Improved compatibility with .local domains (thanks func0der for
reporting)
v 2.6.8.13
Released January 22, 2014 523.6 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/releases/noscript-2.6.8.13.xpi
==========================================================================
x Restored z-order mobility for options dialog on Linux (thanks barbaz
for RFE)
x Moved ClearClick options into their own "Advanced" sub-tab (thanks
Thrawn for RFE)
x Minor options dialog tweakings
- Removed External Filters options panel
x The option dialog is non-modal and recycled now (thanks barbaz for RFE)
v 2.6.8.13rc3
Released January 22, 2014 523.8 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.13rc3.xpi
==========================================================================
x Restored z-order mobility for options dialog on Linux (thanks barbaz
for RFE)
v 2.6.8.13rc2
Released January 20, 2014 523.9 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.13rc2.xpi
==========================================================================
x Moved ClearClick options into their own "Advanced" sub-tab (thanks
Thrawn for RFE)
x Minor options dialog tweakings
- Removed External Filters options panel
v 2.6.8.13rc1
Released January 18, 2014 524.2 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.13rc1.xpi
==========================================================================
x The option dialog is non-modal and recycled now (thanks barbaz for RFE)
v 2.6.8.12
Released January 14, 2014 524.1 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/releases/noscript-2.6.8.12.xpi
==========================================================================
x Improved work-around for
https://bugzilla.mozilla.org/show_bug.cgi?id=958962
+ [Surrogate] Prevent blank ModPagespeed-patched pages when meta refresh
inside NOSCRIPT elements is blocked (thanks thunderscript and barbaz)
x Fixed one-time this.getSite() error on startup
+ Browser Console support
x [L10n] Updated fr (thanks Jack Black)
x Fixed feed reader broken on non-whitelisted sites in non-stable Firefox
(thanks LouCypher for reporting)
v 2.6.8.12rc4
Released January 14, 2014 524.1 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.12rc4.xpi
==========================================================================
x Improved work-around for
https://bugzilla.mozilla.org/show_bug.cgi?id=958962
+ [Surrogate] Prevent blank ModPagespeed-patched pages when meta refresh
inside NOSCRIPT elements is blocked (thanks thunderscript and barbaz)
v 2.6.8.12rc3
Released January 13, 2014 524.1 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.12rc3.xpi
==========================================================================
x Work-around for https://bugzilla.mozilla.org/show_bug.cgi?id=958962
v 2.6.8.12rc2
Released January 11, 2014 523.8 KiB; works with Firefox 3.0.9 - 30.0, SeaMonkey 2.0 - 2.27
https://secure.informaction.com/download/betas/noscript-2.6.8.12rc2.xpi
==========================================================================
x Fixed one-time this.getSite() error on startup
+ Browser Console support
x [L10n] Updated fr (thanks Jack Black)
v 2.6.8.12rc1
Released January 10, 2014 523.7 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.12rc1.xpi
==========================================================================
x Fixed feed reader broken on non-whitelisted sites in non-stable Firefox
(thanks LouCypher for reporting)
v 2.6.8.11
Released January 08, 2014 523.4 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/releases/noscript-2.6.8.11.xpi
==========================================================================
x [XSS] Fixed nested URL parsing optimization bug (thanks Masato Kinugawa
for reporting)
x [XSS] Abort, rather than filter, potential charset-based attacks (
thanks Masato Kinugawa for reporting)
x [XSS] Improved Ebay compatibility (thanks Markus Wienand for reporting)
x [XSS] Fixed bad charset check regression from rc6 (thanks Masato
Kinugawa for reporting)
x [XSS] Fixed bad charset checks not honoring exceptions (thanks Masato
Kinugawa for reporting)
x Adopted the Components.utils.blockScriptForGlobal() API where possible
x [XSS] Further improvements in recursive link checks (thanks Masato
Kinugawa for reporting)
x [XSS] Better checks for combined data/javascript URIs (thanks Masato
Kinugawa for reporting)
x [XSS] Restored fuzzy HTML sniffing in nested data URI (thanks Masato
Kinugawa for reporting)
x [XSS] Improved data URI checks (thanks Masato Kinugawa for reporting)
x [XSS] Enhanced recursive link checks (Thanks PK Cano for reporting)
x [XSS] Stricter HTML checks on second-order data URI injections exactly
fitting whole URL attributes (thanks Masato Kinugawa for reporting)
v 2.6.8.11rc10
Released January 08, 2014 523.8 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc10.xpi
==========================================================================
x [XSS] Fixed new inline script blocking approach (in Firefox Nightly)
not triggering NOSCRIPT element fallbacks
v 2.6.8.11rc9
Released January 08, 2014 523.7 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc9.xpi
==========================================================================
x [XSS] Fixed nested URL parsing optimization bug (thanks Masato Kinugawa
for reporting)
v 2.6.8.11rc8
Released January 06, 2014 523.5 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc8.xpi
==========================================================================
x [XSS] Abort, rather than filter, potential charset-based attacks (
thanks Masato Kinugawa for reporting)
x [XSS] Improved Ebay compatibility (thanks Markus Wienand for reporting)
v 2.6.8.11rc7
Released January 06, 2014 523.2 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc7.xpi
==========================================================================
x [XSS] Fixed bad charset check regression from rc6 (thanks Masato
Kinugawa for reporting)
v 2.6.8.11rc6
Released January 05, 2014 523.2 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc6.xpi
==========================================================================
x [XSS] Fixed bad charset checks not honoring exceptions (thanks Masato
Kinugawa for reporting)
x Adopted the Components.utils.blockScriptForGlobal() API where possible
v 2.6.8.11rc5
Released January 05, 2014 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc5.xpi
==========================================================================
x [XSS] Further improvements in recursive link checks (thanks Masato
Kinugawa for reporting)
v 2.6.8.11rc4
Released January 03, 2014 523.1 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc4.xpi
==========================================================================
x [XSS] Better checks for combined data/javascript URIs (thanks Masato
Kinugawa for reporting)
v 2.6.8.11rc3
Released January 03, 2014 523.2 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc3.xpi
==========================================================================
x [XSS] Restored fuzzy HTML sniffing in nested data URI (thanks Masato
Kinugawa for reporting)
v 2.6.8.11rc2
Released January 03, 2014 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc2.xpi
==========================================================================
x [XSS] Improved data URI checks (thanks Masato Kinugawa for reporting)
x [XSS] Enhanced recursive link checks (Thanks PK Cano for reporting)
v 2.6.8.11rc1
Released January 02, 2014 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.11rc1.xpi
==========================================================================
x [XSS] Stricter HTML checks on second-order data URI injections exactly
fitting whole URL attributes (thanks Masato Kinugawa for reporting)
v 2.6.8.10
Released January 01, 2014 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.10.xpi
==========================================================================
x [XSS] Fixed regression causing Google Talk false positive (thanks
Stuart Young for report)
x Made about:srcdoc placeholder URL for seamless iframes "mandatory"
to reflect its actual permissions status (thanks barbaz for RFE)
v 2.6.8.10rc1
Released December 30, 2013 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.10rc1.xpi
==========================================================================
x [XSS] Fixed regression causing Google Talk false positive (thanks
Stuart Young for report)
x Made about:srcdoc placeholder URL for seamless iframes "mandatory"
to reflect its actual permissions status (thanks barbaz for RFE
v 2.6.8.9
Released December 29, 2013 522.7 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/releases/noscript-2.6.8.9.xpi
==========================================================================
x [XSS] Stricter HTML checks (thanks Masato Kinugawa for reporting)
x [ClearClick] Exception to cope with Youtube's Google+ comments
x [XSS] Better data: URI detection (thanks Masato Kinugawa for reporting)
x [XSS] Improved pure HTML checks (thanks Masato Kinugawa for reporting)
x [XSS] Fixed InjectionChecker tolerance bug (thanks Masato Kinugawa for
reporting)
x [XSS] Improved sanitization
v 2.6.8.9rc5
Released December 29, 2013 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.9rc5.xpi
==========================================================================
x [XSS] Stricter HTML checks (thanks Masato Kinugawa for reporting)
x [ClearClick] Exception to cope with Youtube's Google+ comments
v 2.6.8.9rc4
Released December 28, 2013 522.8 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.9rc4.xpi
==========================================================================
x [XSS] Better data: URI detection (thanks Masato Kinugawa for reporting)
v 2.6.8.9rc3
Released December 27, 2013 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.9rc3.xpi
==========================================================================
x [XSS] Improved pure HTML checks (thanks Masato Kinugawa for reporting)
v 2.6.8.9rc2
Released December 24, 2013 522.9 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.9rc2.xpi
==========================================================================
x [XSS] Better fix for InjectionChecker tolerance bug (thanks Masato
Kinugawa for reporting)
v 2.6.8.9rc1
Released December 23, 2013 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.9rc1.xpi
==========================================================================
x [XSS] Fixed InjectionChecker tolerance bug (thanks Masato Kinugawa for
reporting)
x [XSS] Improved sanitization
v 2.6.8.8
Released December 17, 2013 522.9 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/releases/noscript-2.6.8.8.xpi
==========================================================================
+ Enforce docShell-based script blocking for Gecko > 28
+ [Surrogate] addthis.com widget emulation (thanks Mathnerd314)
v 2.6.8.8rc2
Released December 16, 2013 522.8 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.8rc2.xpi
==========================================================================
+ Enforce docShell-based script blocking for Gecko > 28
v 2.6.8.8rc1
Released December 11, 2013 522.7 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.8rc1.xpi
==========================================================================
+ [Surrogate] addthis.com widget emulation (thanks Mathnerd314)
v 2.6.8.7
Released December 02, 2013 522.6 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/releases/noscript-2.6.8.7.xpi
==========================================================================
x Fixed performance regression in request identity tracking (thanks
cumdacon and nospamboz for reporting)
+ Protection against new SQLXSSI obfuscation techinques (thanks Alex
Inführ for reporting)
x Fixed noscript.allowedMimeRegExp ignoring the FONT pseudo-type (thanks
barbaz for reporting)
v 2.6.8.7rc4
Released November 29, 2013 522.7 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.7rc4.xpi
==========================================================================
x Fixed performance regression in request identity tracking (thanks
cumdacon and nospamboz for reporting)
v 2.6.8.7rc3
Released November 29, 2013 523.0 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.7rc3.xpi
==========================================================================
+ Protection against new SQLXSSI obfuscation techinques (thanks Alex
Inführ for reporting)
v 2.6.8.7rc2
Released November 27, 2013 522.4 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.7rc2.xpi
==========================================================================
x Fixed noscript.allowedMimeRegExp ignoring the FONT pseudo-type take 2
(thanks barbaz for reporting)
v 2.6.8.7rc1
Released November 27, 2013 522.5 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.7rc1.xpi
==========================================================================
x Fixed noscript.allowedMimeRegExp ignoring the FONT pseudo-type (thanks
barbaz for reporting)
v 2.6.8.6
Released November 27, 2013 522.3 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/releases/noscript-2.6.8.6.xpi
==========================================================================
x Fixed bugs in noscript.allowedMimeRegExp support (thanks barbaz for
reporting)
x [ABE] Fixed increased asynchronicity in Gecko's network processing
causing intermittent failures (thanks barbaz and al_9x for reporting)
x [Surrogate] Fixed bug in asynchronous Google Analytics API emulation
(thanks Lucas Malor for reporting)
x Fixed missing icon for blocked objects when no script is present in the
page and scrips are globally allowed
v 2.6.8.6rc2
Released November 27, 2013 522.6 KiB; works with Firefox 3.0.9 - 29.0, SeaMonkey 2.0 - 2.26
https://secure.informaction.com/download/betas/noscript-2.6.8.6rc2.xpi
==========================================================================
x Fixed bugs in noscript.allowedMimeRegExp support (thanks barbaz for
reporting)
x [ABE] Fixed increased asynchronicity in Gecko's network processing
causing intermittent failures (thanks barbaz and al_9x for reporting)
v 2.6.8.6rc1
Released November 18, 2013 522.5 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/betas/noscript-2.6.8.6rc1.xpi
==========================================================================
x [Surrogate] Fixed bug in asynchronous Google Analytics API emulation
(thanks Lucas Malor for reporting)
x Fixed missing icon for blocked objects when no script is present in the
page and scrips are globally allowed
v 2.6.8.5
Released November 08, 2013 522.2 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/releases/noscript-2.6.8.5.xpi
==========================================================================
x [ClearClick] Fixed empty contentEditable elements cannot receive
keyboard events in cross-site frames (breaking latest Youtube comments)
x [XSS] Fixed false positive on redirected script inclusions (breaking
Stripe payments on Humblebundle, thanks ableeker for reporting)
x [Surrogate] Better GA, GAPI, Twitter and Facebook compatibility
v 2.6.8.5rc2
Released November 08, 2013 522.3 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/betas/noscript-2.6.8.5rc2.xpi
==========================================================================
x [ClearClick] Fixed empty contentEditable elements cannot receive
keyboard events in cross-site frames (breaking latest Youtube comments)
x [XSS] Fixed false positive on redirected script inclusions (breaking
Stripe payments on Humblebundle, thanks ableeker for reporting)
v 2.6.8.5rc1
Released October 30, 2013 522.5 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/betas/noscript-2.6.8.5rc1.xpi
==========================================================================
x [Surrogate] Better GA, GAPI, Twitter and Facebook compatibility
v 2.6.8.4
Released October 24, 2013 522.2 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/releases/noscript-2.6.8.4.xpi
==========================================================================
x Fixed shortcut bookmarklet execution requiring noscript.allowURLBarJS
preference to be true on Firefox 25 beta (thanks ivank for report)
x [Surrogate] Better emulation of for Google Analytics asynchronous
tracking (for instance, fixes GMail's "Sign in" link)
x [ClearClick] Fixed exception being thrown on Firefox 27 alpha (Nightly)
x Fixed URL bar enhancements broken by Firefox 25 beta
x Fixed SetVariable/GetVariable failing on dynamically created Flash
elements, e.g. with SFWObject (thanks longsleep for reporting)
v 2.6.8.4rc3
Released October 24, 2013 522.5 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/betas/noscript-2.6.8.4rc3.xpi
==========================================================================
x Fixed shortcut bookmarklet execution requiring noscript.allowURLBarJS
preference to be true on Firefox 25 beta (thanks ivank for report)
v 2.6.8.4rc2
Released October 23, 2013 522.3 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/betas/noscript-2.6.8.4rc2.xpi
==========================================================================
x [Surrogate] Better emulation of for Google Analytics asynchronous
tracking (for instance, fixes GMail's "Sign in" link)
x [ClearClick] Fixed exception being thrown on Firefox 27 alpha (Nightly)
x Fixed URL bar enhancements broken by Firefox 25 beta
v 2.6.8.4rc1
Released October 17, 2013 522.4 KiB; works with Firefox 3.0.9 - 28.0, SeaMonkey 2.0 - 2.25
https://secure.informaction.com/download/betas/noscript-2.6.8.4rc1.xpi
==========================================================================
x Fixed SetVariable/GetVariable failing on dynamically created Flash
elements, e.g. with SFWObject (thanks longsleep for reporting)
v 2.6.8.3
Released October 14, 2013 522.3 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/releases/noscript-2.6.8.3.xpi
==========================================================================
x Fixed complex bookmarklet execution requiring synchronous XHR in a
content policy callback
x Fixed full-page plugins failed activation until the page is reloaded
x Fixed full-page HTML5 media failing to play after activation until the
page is reloaded
v 2.6.8.3rc3
Released October 12, 2013 522.4 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8.3rc3.xpi
==========================================================================
x Fixed complex bookmarklet execution requiring synchronous XHR in a
content policy callback
v 2.6.8.3rc2
Released October 11, 2013 522.3 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8.3rc2.xpi
==========================================================================
x Fixed full-page plugins failed activation until the page is reloaded
v 2.6.8.3rc1
Released October 11, 2013 522.3 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8.3rc1.xpi
==========================================================================
x Fixed full-page HTML5 media failing to play after activation until the
page is reloaded
v 2.6.8.2
Released October 01, 2013 522.3 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/releases/noscript-2.6.8.2.xpi
==========================================================================
x Fixed request methods different than POST being turned into GET by
internal channel redirection when the DNS entry is not cached yet
x Fixed regression from CTP fix: some kinds of embedded objects being
displayed, even though in disabled state, along with placeholders
v 2.6.8.2rc2
Released October 01, 2013 522.5 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8.2rc2.xpi
==========================================================================
x Fixed request methods different than POST being turned into GET by
internal channel redirection when the DNS entry is not cached yet
v 2.6.8.2rc1
Released October 01, 2013 522.3 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8.2rc1.xpi
==========================================================================
x Fixed regression from CTP fix: some kinds of embedded objects being
displayed, even though in disabled state, along with placeholders
v 2.6.8.1
Released September 20, 2013 522.2 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/releases/noscript-2.6.8.1.xpi
==========================================================================
+ Added to the default whitelist some CDN subdomains dedicated to serve
popular open source JS libraries (thanks t3g for RFE)
x Fixed notification box issues with Seamonkey (thanks barbaz)
x Work-around for broken CTP notifications (bug 903675)
x Work-around for Youtube comments XSS false (?) positive
x [L10n] Updated fr (thanks Jack Black)
v 2.6.8.1rc1
Released September 20, 2013 522.3 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8.1rc1.xpi
==========================================================================
- Removed automatic whitelisting of open source JS libraries CDNs for
users which have googleapis.com whitelisted
v 2.6.8rc1
Released September 20, 2013 522.4 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/betas/noscript-2.6.8rc1.xpi
==========================================================================
+ Added to the default whitelist some CDN subdomains dedicated to serve
popular open source JS libraries (thanks t3g for RFE)
x Fixed notification box issues with Seamonkey (thanks barbaz)
x Work-around for broken CTP notifications (bug 903675)
x Work-around for Youtube comments XSS false (?) positive
x [Locale] Updated fr (thanks Jack Black)
v 2.6.7.1
Released August 14, 2013 521.7 KiB; works with Firefox 3.0.9 - 27.0, SeaMonkey 2.0 - 2.24
https://secure.informaction.com/download/releases/noscript-2.6.7.1.xpi
==========================================================================
x [XSS] Fixed false positive on GMail when opening the Google Docs file
picker (thanks Harry for reporting)
x [XSS] Fixed parameter elision bug
+ Protection against another variant of error-based SQLXSSI (thanks Alex
Inführ for reporting)
v 2.6.7.1rc2
Released August 14, 2013 521.8 KiB; works with Firefox 3.0.9 - 26.0, SeaMonkey 2.0 - 2.23
https://secure.informaction.com/download/betas/noscript-2.6.7.1rc2.xpi
==========================================================================
x [XSS] Fixed false positive on GMail when opening the Google Docs file
picker (thanks Harry for reporting)
x [XSS] Fixed parameter elision bug
v 2.6.7.1rc1
Released August 08, 2013 521.5 KiB; works with Firefox 3.0.9 - 26.0, SeaMonkey 2.0 - 2.23
https://secure.informaction.com/download/betas/noscript-2.6.7.1rc1.xpi
==========================================================================
+ Protection against another variant of error-based SQLXSSI (thanks Alex
Inführ for reporting)
v 2.6.7
Released August 07, 2013 521.7 KiB; works with Firefox 3.0.9 - 26.0, SeaMonkey 2.0 - 2.23
https://secure.informaction.com/download/releases/noscript-2.6.7.xpi
==========================================================================
x Fixed HTML 5 media content types not blocked when loaded as top-level
documents (thanks al_9x for reporting)
x [XSS] Fixed bug in SQLXSSI detection (thanks Alex Inführ for reporting)
x Fixed resources from resource: origin (such as PDF.js fonts) being
unnecessarily blocked in restrictive embed blocking mode
x Removed "ReferenceError: PolicyState is not defined" message appearing
sometimes in the console dump on startup
x Fixed scrollbars removed in frames activated from placeholder (thanks
al_9x for reporting)
v 2.6.7rc3
Released August 07, 2013 521.5 KiB; works with Firefox 3.0.9 - 26.0, SeaMonkey 2.0 - 2.23
https://secure.informaction.com/download/betas/noscript-2.6.7rc3.xpi
==========================================================================
x Fixed HTML 5 media content types not blocked when loaded as top-level
documents (thanks al_9x for reporting)
v 2.6.7rc2
Released August 07, 2013 521.7 KiB; works with Firefox 3.0.9 - 26.0, SeaMonkey 2.0 - 2.23
https://secure.informaction.com/download/betas/noscript-2.6.7rc2.xpi
==========================================================================
x Removed further "ReferenceError: PolicyState is not defined" messages
x [XSS] Fixed bug in SQLXSSI detection (thanks Alex Inführ for reporting)
v 2.6.7rc1
Released August 05, 2013 521.4 KiB; works with Firefox 3.0.9 - 26.0, SeaMonkey 2.0 - 2.23
https://secure.informaction.com/download/betas/noscript-2.6.7rc1.xpi
==========================================================================
x Fixed resources from resource: origin (such as PDF.js fonts) being
unnecessarily blocked in restrictive embed blocking mode
x Removed "ReferenceError: PolicyState is not defined" message appearing
sometimes in the console dump on startup
x Fixed scrollbars removed in frames activated from placeholder (thanks
al_9x for reporting)
v 2.6.6.9
Released July 21, 2013 521.5 KiB; works with Firefox 3.0.9 - 25.0, SeaMonkey 2.0 - 2.22
https://secure.informaction.com/download/releases/noscript-2.6.6.9.xpi
==========================================================================
+ [XSS] Added several experimental / unofficial markup atoms to the
build-time matcher generator (thanks .mario for reporting)
v 2.6.6.9rc1
Released July 20, 2013 521.8 KiB; Works with Firefox 3.0.9 - 25.0, SeaMonkey 2.0 - 2.22
https://secure.informaction.com/download/betas/noscript-2.6.6.9rc1.xpi
==========================================================================
+ [XSS] Added several experimental / unofficial markup atoms to the
build-time matcher generator (thanks .mario for reporting)
v 2.6.6.8
Released July 06, 2013 523.2 KiB; works with Firefox 3.0.9 - 25.0, SeaMonkey 2.0 - 2.22
https://secure.informaction.com/download/releases/noscript-2.6.6.8.xpi
==========================================================================
x [XSS] Protection against filter evasion exploiting Adobe Flash URL
parsing and charset handling bugs (thanks Soroush Dalili for reporting)
v 2.6.6.8rc1
Released July 06, 2013 523.2 KiB; works with Firefox 3.0.9 - 25.0, SeaMonkey 2.0 - 2.22
https://secure.informaction.com/download/betas/noscript-2.6.6.8rc1.xpi
==========================================================================
x [XSS] Protection against filter evasion exploiting Adobe Flash URL
parsing and charset handling bugs (thanks Soroush Dalili for reporting)
v 2.6.6.7
Released July 02, 2013 521.8 KiB; works with Firefox 3.0.9 - 25.0, SeaMonkey 2.0 - 2.22
https://secure.informaction.com/download/releases/noscript-2.6.6.7.xpi
==========================================================================
x Fixed ClearClick triggered by recently changed browser built-in Click
To Play placeholders (bug 889228)
x [L10n] Updated Czech (thanks Karel)
v 2.6.6.7rc1
Released July 02, 2013 521.9 KiB; works with Firefox 3.0.9 - 25.0, SeaMonkey 2.0 - 2.22
https://secure.informaction.com/download/betas/noscript-2.6.6.7rc1.xpi
==========================================================================
x Fixed ClearClick triggered by recently changed browser built-in Click
To Play placeholders (bug 889228)
x [L10n] Updated Czech (thanks Karel)
v 2.6.6.6
Released June 10, 2013 521.8 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/releases/noscript-2.6.6.6.xpi
==========================================================================
+ Made mimetype whitelisting through the noscript.allowedMimeRegExp
preference work with the WebGL pseudo type (thanks Thrawn for RFE)
v 2.6.6.6rc1
Released June 10, 2013 521.9 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.6rc1.xpi
==========================================================================
+ Made mimetype whitelisting through the noscript.allowedMimeRegExp
preference work with the WebGL pseudo type (thanks Thrawn for RFE)
v 2.6.6.5
Released June 08, 2013 522.1 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/releases/noscript-2.6.6.5.xpi
==========================================================================
x Better fix for Nightly breakages
v 2.6.6.5rc1
Released June 08, 2013 522.1 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.5rc1.xpi
==========================================================================
x Better fix for Nightly breakages
v 2.6.6.4
Released June 08, 2013 522.0 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/releases/noscript-2.6.6.4.xpi
==========================================================================
x Fixed some recent breakages on Nightly
v 2.6.6.4rc1
Released June 08, 2013 522.0 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.4rc1.xpi
==========================================================================
x Fixed some recent breakages on Nightly
v 2.6.6.3
https://secure.informaction.com/download/releases/noscript-2.6.6.3.xpi
==========================================================================
x Improved "fixable" JavaScript links detection (thanks asdf for RFE)
v 2.6.6.3rc1
Released May 28, 2013 521.9 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.3rc1.xpi
==========================================================================
x Improved "fixable" JavaScript links detection (thanks asdf for RFE)
v 2.6.6.2
Released May 17, 2013 521.7 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/releases/noscript-2.6.6.2.xpi
==========================================================================
x Fixed regression in Tab Mix Plus compatibility due to Gecko 21 changes
x Improved placeholder management for full-document plugin content, e.g.
makes Youtube embeddings more usable on Facebook
v 2.6.6.2rc2
Released May 17, 2013 522.1 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.2rc2.xpi
==========================================================================
x Fixed regression in Tab Mix Plus compatibility due to Gecko 21 changes
v 2.6.6.2rc1
Released May 04, 2013 521.8 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.2rc1.xpi
==========================================================================
x Improved placeholder management for full-document plugin content, e.g.
makes Youtube embeddings more usable on Facebook
v 2.6.6.1
Released April 29, 2013 521.7 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/releases/noscript-2.6.6.1.xpi
==========================================================================
x Fixed backward compatibility issue with recent channel cloning changes
x [XSS] Compatibility with certain redirector URL patterns (thanks
Stephen F. for reporting)
x [ABE] Fixed letest Tab Mix Plus version (4.1.0) causing loads started
from the address bar to be considered cross-site
x [L10n] Updated Esperanto (thanks Michael Wolf)
x [L10n] Updated Upper Serbian (thanks Michael Wolf)
v 2.6.6.1rc2
Released April 29, 2013 522.0 KiB; works with Firefox 3.0.9 - 24.0, SeaMonkey 2.0 - 2.21
https://secure.informaction.com/download/betas/noscript-2.6.6.1rc2.xpi
==========================================================================
x Fixed backward compatibility issue with recent channel cloning changes
x [XSS] Compatibility with certain redirector URL patterns (thanks
Stephen F. for reporting)
v 2.6.6.1rc1
Released April 23, 2013 521.8 KiB; works with Firefox 3.0.9 - 23.0, SeaMonkey 2.0 - 2.20
https://secure.informaction.com/download/betas/noscript-2.6.6.1rc1.xpi
==========================================================================
x [ABE] Fixed letest Tab Mix Plus version (4.1.0) causing loads started
from the address bar to be considered cross-site
x [L10n] Updated Esperanto (thanks Michael Wolf)
x [L10n] Updated Upper Serbian (thanks Michael Wolf)
v 2.6.6
Released April 03, 2013 520.0 KiB; works with Firefox 3.0.9 - 23.0, SeaMonkey 2.0 - 2.20
https://secure.informaction.com/download/releases/noscript-2.6.6.xpi
==========================================================================
x Added per-window private browsing support to some background requests
x Improved channel cloning for internal redirections
x Added further Microsoft mail services dependencies to the default
whitelist
x [XSS] Fixed character class bug (thanks Masato Kinugawa for reporting)
x [XSS] Fixed potential jQuery-based injection (thanks Masato Kinugawa
for reporting)
x Improved handling of some moz-null principal instances in ABE requests
(thanks Thrawn for reporting)
+ New 360Haven surrogate lets the site work with 1st party scripts
allowed and ads/tracker scripts forbidden
v 2.6.6rc5
Released April 03, 2013 520.2 KiB; works with Firefox 3.0.9 - 23.0, SeaMonkey 2.0 - 2.20
https://secure.informaction.com/download/betas/noscript-2.6.6rc5.xpi
==========================================================================
x Added per-window private browsing support to some background requests
x Improved channel cloning for internal redirections
x Added further Microsoft mail services dependencies to the default
whitelist
v 2.6.6rc4
Released March 21, 2013 519.6 KiB; works with Firefox 3.0.9 - 23.0, SeaMonkey 2.0 - 2.20
https://secure.informaction.com/download/betas/noscript-2.6.6rc4.xpi
==========================================================================
x [XSS] Fixed character class bug (thanks Masato Kinugawa for reporting)
v 2.6.6rc3
Released March 21, 2013 519.8 KiB; works with Firefox 3.0.9 - 23.0, SeaMonkey 2.0 - 2.20
https://secure.informaction.com/download/betas/noscript-2.6.6rc3.xpi
==========================================================================
x [XSS] Fixed potential jQuery-based injection (thanks Masato Kinugawa
for reporting)
v 2.6.6rc2
Released March 20, 2013 519.5 KiB; works with Firefox 3.0.9 - 22.0, SeaMonkey 2.0 - 2.19
https://secure.informaction.com/download/betas/noscript-2.6.6rc2.xpi
==========================================================================
x Improved handling of some moz-null principal instances in ABE requests
(thanks Thrawn for reporting)
v 2.6.6rc1
Released March 16, 2013 519.5 KiB; works with Firefox 3.0.9 - 22.0, SeaMonkey 2.0 - 2.19
https://secure.informaction.com/download/betas/noscript-2.6.6rc1.xpi
==========================================================================
+ New 360Haven surrogate lets the site work with 1st party scripts
allowed and ads/tracker scripts forbidden
v 2.6.5.9
Released March 11, 2013 519.4 KiB; works with Firefox 3.0.9 - 22.0, SeaMonkey 2.0 - 2.19
https://secure.informaction.com/download/releases/noscript-2.6.5.9.xpi
==========================================================================