NoScript Security Suiteby Giorgio Maone

4.4 Stars out of 5

NoScript Security Suite version history - 25 versions

Be careful with old versions! These versions are displayed for testing and reference purposes.
You should always use the latest version of an add-on.
Latest version
Version 11.0.3
Released Aug 19, 2019 - 535.65 KB
Works with firefox 59.0 and later, android 59.0 and later
v 11.0.3
=============================================================
x [Tor] Work-around for prompts being huge when
resistFingerprinting is enabled
x [XSS] Fixed false positives due to overzealous HTML
attribute checking
x [XSS] Enabled InjectionChecker logging when debugging mode
is on
x Work-around for browser.i18n.getMessage() API in content
scripts giving away browser's real locale (Tor issue #31287)
x Updated TLDs
x [L10n] Updated Transifex-managed he, is, nb, ru, sq, zh_TW
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Older versions
Version 11.0.2
Released Jul 25, 2019 - 535.21 KB
Works with firefox 59.0 and later, android 59.0 and later
v 11.0.2
=============================================================
+ Restored "classic" pasted HTML sanitization feature, Now
triggered by drag'n'drop too (thanks barbaz for patch)
x Fixed bug in browser type detection by content scripts (
thanks barbaz)
+ Added "Collapse blocked objects" option in Blocked Objects
prompt
x Fixed corner case when application/* content types should
match "media" rather than "object" (thanks skriptimaahinen
for reporting)
x Replacement clicks are now intercepted even if a content
placeholder is obstructed by an overlay
x More graceful handling of chrome: origins (thanks
skriptimaahinen for reporting)
x CSP building optimizations
x Updated TLDs.
x [L10n] Updated Transifex-managed locales br, de, it, ms,
nl, ru, tr, nb, sv_SE and zh_CN
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 11.0
Released Jun 24, 2019 - 533.93 KB
Works with firefox 59.0 and later, android 59.0 and later
v 11.0
=============================================================
x [XSS] Fixed false positives with parameters named "src"
x Static click-to-play placeholders
+ [L10n] New da, is, pl, sq, zh_TW Transifex-managed locales
x [L10n] Updated sv_SE Transifex-managed locale
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.6.3
Released Jun 15, 2019 - 506.44 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.6.3
=============================================================
x Multiple fixes in embeddings replacement (thanks barbaz
for reporting)
x Fixed [Import] settings button on Android
x [XSS] JSON reduction optimizations
x [XSS] XSS checks performance improvements play nicer with
resistFingerprinting
x [XSS] Fully asynchronous InjectionChecker, prevents freezes
on heavy payloads
x Skip page autoreloads on transitions between temporary and
permanent presets of the same kind
x Updated TLDs
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.6.2
Released May 22, 2019 - 504.48 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.6.2
=============================================================
x Removed work-around for https://bugzil.la/1532530 (now
fixed and backported to the Tor Browser too)
x Fixed media.mediasource.enabled breakage (thanks
skriptimaahinen for patch)
x Reference internal pages as absolute URLs for Chromium
compatibility
x Updated TLDs
x [Locale] Updated Transifex-managed locales (es, ms, tr)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.6.1
Released Apr 10, 2019 - 507.54 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.6.1
=============================================================
x Make RequestGuard's header processing synchronous as needed
x Fixed inconsistencies handling browser-internal URLs
x Fixed resetting options works just once per session
(defaults reference current settings) - issue #69
x [Locale] Updated Transifex-managed locales (de, fr, it, tr,
nl)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.6
Released Apr 7, 2019 - 507.83 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.6
=============================================================
x Limit wrappedJSObject usages to compatible browsers
x [Chromium] Merged chromium branch (unified code base)
x [Locale] Updated Transifex-managed locales
x Updated TLDs
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.2.5
Released Mar 24, 2019 - 490.81 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.2.5
=============================================================
x [XSS] Improved detection of privileged origins (fixes an
about:tor to DuckDuckGo false positive)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.2.4
Released Mar 20, 2019 - 490.77 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.2.4
=============================================================
x Improved prompts layout (thanks Ton for suggestion)
x Improved unscanned POST blocking
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.2.3
Released Mar 19, 2019 - 490.72 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.2.3
=============================================================
x [l10n] Updated Transifex-managed locales
x Fixed POST searches from the url bar causing XSS warnings
x Fixed popup top buttons not visible in high contrast
appearance mode (thanks pjaworski for reporting)
x Optimized popup layout initialization
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.2.2
Released Mar 17, 2019 - 490.64 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.2.2
=============================================================
x [L10n] Updated Transifex-managed locales
+ Cascading top document's restrictions to subdocuments is now
an option in the General section and defaults to true on
the Tor Browser only
+ "Scan uploads for potential cross-site attacks" and "Ask
confirmation for cross-site POST requests which could not
be scanned" options: in Tor Browser default false and true,
respectively, as a work-around for mozbug 1532530
+ [Tor] "Override Tor Browser Security Level preset" option
+ [Tor] Selective handling of Tor Browser specific settings
x Updated TLDs
x [XSS] Updated event names
x Safer cookie-less check for unrestricted tabs from subdocs
x [Build] Easier version bumps to next rc (build.sh bump rcX)
x Fixed unrestricted tabs not affecting about:blank subframes
(issue #48, thanks musonius for reporting)
x [XSS] Updated known HTML events lists
+ [Locale] Added sv_SE (by Jonatan Nyberg)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.2.1
Released Dec 23, 2018 - 475.29 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.2.1
=============================================================
x Cascade top document's restrictions to subframes (Tor
issue #28873)
x Fixed restored media element from placeholder not loading
previously blocked content automatically
x Fixed placeholders missing for some blocked embeddings
(Tor ticket #28720)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.2.0
Released Nov 25, 2018 - 475.11 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.2.0
============================================================
x [L10n] Updated fr, he
x Allow origin-less fetch for extensions (issue #41)
x Fixed meta refresh inside NOSCRIPT emulation breaking
Firefox's built-in refresh blocking
x Fixed issue #35 "tabId is not defined" on startup
x Darker red badge background to ensure text is kept white
across browsers
</pre>
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.9
Released Oct 16, 2018 - 475.12 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.9
=============================================================
x Prevention of potential race condition in the new per-tab
configuration cookie-based hack
x Better cross-platfrom build script compatibility
x Per-tab configuration cookie-based hack, leaves window.name
alone
x Various build scripts fixes
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.8
Released Oct 6, 2018 - 475.12 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.8
=============================================================
x Fixed preset customization UI showing inherited DEFAULT
permissions if a protocol-level preset exists
x Simplified CSP HTTP header injection, avoiding report-to
until actually supported by browsers
x [L10n] Updated ru (thanks fatboy)
+ [Tor] Better UX for overriding protocol-level permissions
+ [Build] Option to force TLD updates
+ [L10n] Updated (es, ru) and new (el, he, ms, nb) locales
from OTF's Localization Lab Transifex project
+ [L10n] no_BO translation by comradekingu
+ FTP directory UI emulation on script-disabled domains
x Include ftp:// URLs in non-secure domain matching (thanks
Rassilon for RFE)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.6
Released Sep 14, 2018 - 446.58 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.6
=============================================================
x [TB] Gracefully handle legacy external message recipients
x [XSS] Updated known HTML5 events
x Better IPV6 support
x UI support for protocol-only entries
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.5
Released Sep 9, 2018 - 446.26 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.5
=============================================================
x Fix for various content script timing related issues
(thanks therube for reporting)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.4
Released Sep 9, 2018 - 446.37 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.4
=============================================================
x Prevent total breakages when policies accidentally map
to invalid match patterns
x Internal messaging dispatch better coping with multiple
option windows
x Avoid multiple CSP DOM insertions
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.3
Released Sep 9, 2018 - 446.25 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.3
=============================================================
x Fixed message handling regression breaking embedders and
causing potential internal message loops
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.2
Released Sep 8, 2018 - 446.12 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.2
=============================================================
x More efficient window.name-based tab-scoped permissions
persistence
x Fixed URL parsing bugs
x Fixed bug in requestKey generation
x [Build] Enhanced TLD data update subsystem
+ [UI] CUSTOM presets gets initialized with currently applied
preset, including temporary/permanent status
x Improved internal message dispatching, avoiding potential
race conditions
+ [L10n] Transifex integration
x Work-around for DOM-injected CSP not being honored when
appended to the root element, rather than HEAD
+ Transparent support for FQDNs
x Better file: protocol support
x Full-page placeholders for media/plugin documents
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9.1
Released Aug 30, 2018 - 443.67 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9.1
=============================================================
x Fixed NOSCRIPT emulation not running in contexts where
service workers are disabled, such as private windows
(thanks Peter Wu for patch)
x [Build] Fixed TLD regexp generation broken by CRLF
characters in input public suffix list
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.9
Released Aug 29, 2018 - 443.66 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.9
=============================================================
+ Completely revamped CSP backend, enforcing policies both in
webRequest and in the DOM
+ Reload-less service worker busting
- removed obsoleted failsafes, including forced reloads
x Better timing for popup UI feedback on permissions changes
x [Tor] Reordered startup sequence to better cooperate with
embedders like the Tor Browser
x Send out a "started" message after initialization to help
embedders (like the Tor browser) interact with NoScript
x [Build] Better support for versions bumps
x Updated TLDs
x [Build] Improved TLD auto-updater
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.8.23
Released Aug 25, 2018 - 440.25 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.8.23
=============================================================
x Hotfix for reload loops before CSP management refactoring
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.8.22
Released Aug 24, 2018 - 440.26 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.8.22
=============================================================
x Fixed reload loop on unrestricted tabs (thanks random for
reporting)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now
Version 10.1.8.20
Released Aug 24, 2018 - 440.17 KB
Works with firefox 59.0 and later, android 59.0 and later
v 10.1.8.20
=============================================================
x Fixed Sites.domainImplies() misplaced optimization.
x build.sh support for quick stable release
x [L10n] Added Catalan (ca)
Source code released under GNU General Public License, version 2.0
Only with Firefox—Get Firefox Now

Latest version

Version 11.0.3

Older versions

Version 11.0.2

Version 11.0

Version 10.6.3

Version 10.6.2

Version 10.6.1

Version 10.6

Version 10.2.5

Version 10.2.4

Version 10.2.3

Version 10.2.2

Version 10.2.1

Version 10.2.0

Version 10.1.9.9

Version 10.1.9.8

Version 10.1.9.6

Version 10.1.9.5

Version 10.1.9.4

Version 10.1.9.3

Version 10.1.9.2

Version 10.1.9.1

Version 10.1.9

Version 10.1.8.23

Version 10.1.8.22

Version 10.1.8.20