OS and Software > Mozilla Software > [FireFox] NoScript [DEV BUILDs] Releases

[FireFox] NoScript [DEV BUILDs] Releases

v 2.2.3rc3
Whats New
• Generalized checks on drag and drop payloads
• [XSS] Tightened checks on reflected javascript: URIs

reply to hayc59
v 2.2.3rc4
Whats New
• Configuration import/export directory is persisted across sessions

reply to hayc59
v 2.2.4rc1
Whats New
• Fixed reflected script inclusion false positive on redirections
• Removed "Forbid Web Bugs", which cannot be reliably enforced anymore
because of speculative parsing
• Restored wlxrs.com in the default whitelist (it had
accidentally changed back to two subdomains)
• Fixed resetting options not erases the untrusted blacklist until restart
(thanks ddigas for reporting)
--
ãrê ¥Øu êxpêriêncêD
Microsoft® MVP Consumer Security
"Greater love has no one than this, that he lay down his life for his friends."
9/11/01 Never Forget
(H59 Clan)

v 2.2.4rc2
============================
+ [ClearClick] Enhanced protection against same-window timing attacks
with moving pointer (thanks Michal Zalewski for PoC)
x SyntaxChecker's JavaScript version can be configured per-instance
(default "1.5")
x [Surrogate] JavaScript version set to "ECMAv5"
x [Surrogate] Use "ECMAv5" for early syntax checks

Legend: [+] new feature, [x] bug fix, [-] removed feature, [=] repackaging or cosmetic change

reply to hayc59
v 2.2.4rc3
Whats New
• Fixed regression in SWFObject emulation for plugin placeholders
• Fixed top-level surrogates broken by ECMAv5 version specification

reply to hayc59
v 2.2.4rc4
Whats New
• Fixed some localizations having newlines replaced with 'n' characters

reply to hayc59
2.2.5rc1
Whats New
• Work around for Mozilla bug 712649

reply to hayc59
v 2.2.5rc2
Whats New
• Work around for Linux tooltips obstructing the embedding unblocking confirmation dialog

reply to hayc59
v 2.2.5rc3
Whats New
• [XSS] Better compatibility with Verified by VISA (www.securesuite.net)
• Tentative work-around for bug 710170

reply to hayc59
v 2.2.5rc4
Whats New
• [ClearClick] Better compatibility with recent Disqus widget versions

reply to hayc59
v 2.2.6rc2
• [XSS] Fixed sanitization reporting bug
v 2.2.6rc1
• [ClearClick] Better compatibility with recent Disqus widget versions

reply to hayc59
v 2.2.7rc1
• [ClearClick] Protection against two steps interaction attack based on
HTML5 DnD (thanks .mario for reporting)

reply to hayc59
v 2.2.8rc2
• [ClearClick] Fixed regression, 2.2.8rc1 swallowing clicks on some nested documents

reply to hayc59
v 2.2.9rc1
• Fixed ABE failing to recognize some FE80:* IPv6 addresses as local ones
(thanks Mitchum Owen for report)

reply to hayc59
v 2.3rc1
• Added blob:, about:memory and about:support to the automatic whitelist
• Added reflected script inclusion check exception for intensedebate.com
• Fixed CSS issues on Gecko 1.8

reply to hayc59
v 2.3rc2
• Fixed about:newtab not considered as a local origin by ABE

reply to hayc59
v 2.3.1rc2
• adf.ly surrogate to automaticaly skip the interstitial page even if
scripts are disabled
• Improved Google search surrogates

reply to hayc59
Noscript v 2.3.1rc3
==================================================

x Removed ClearClick bypass based on a Firefox SVG CSS filter bug (thanks mario for reporting)

==================================================

»noscript.net/getit
--
"We're your friends. We're not like the others, man, really."

reply to hayc59
Noscript v 2.3.1rc4 dev build
=========================================
+ Surrogate to let news pages escape Digg's frame

+ [ClearClick] Improved compatibility with cross-frame overlapping shadows
=================================

Get it: »noscript.net/getit
--
"We're your friends. We're not like the others, man, really."