Product Information
What is Noscript?
The NoScript Firefox extension provides additional protection for Firefox, SeaMonkey, and other Mozilla-based browsers: this free, open-source add-on allows JavaScript, Java, Flash, and other plugins to run only on trusted websites of your choice (e.g., online banking). NoScript also offers the most robust anti-XSS and anti-clickjacking protections ever available in a browser. Its unique whitelist-based preemptive script-blocking approach prevents exploitation of security vulnerabilities (both known and unknown!) without sacrificing functionality...
You can enable JavaScript, Java, and plugin execution for trusted sites via the NoScript status bar icon (see image) or the context menu for easier operation in popup-free status bar windows.
Watch CNET’s "Block in Firefox" video.
For Android: NoScript Anywhere (NSA) is the nickname for the next major iteration of the NoScript security add-on (NoScript 3.x), which has been completely revamped to align with Mozilla’s Electrolysis multiprocessing architecture and to support Firefox Mobile on Android smartphones and tablets.
This open-source (GPL) project began in early 2011 and was partially funded by the NLNET Foundation. NoScript 3 alpha, available for Firefox 4 Mobile on Android and Maemo, delivers all the key security features of "classic" NoScript:
- Easy per-site active content permission management.
- The first and most powerful anti-XSS (Cross-Site Scripting) filter available in a web browser.
- ClearClick, the only effective client-side protection against clickjacking.*
- ABE (Application Boundaries Enforcer), a true web application firewall within your mobile browser, safeguarding your router and web apps from CSRF and DNS rebinding attacks.**
How to use Noscript?
NoScript is a browser extension that enhances security by preemptively blocking scripts, allowing only trusted websites to run JavaScript, Java, Flash, and other active content, effectively defending against XSS and Clickjacking attacks.
Core Functions of Noscript
Lightweight, Privacy-Focused, Security-Focused, Ad-Free, No Tracking, Blocks Trackers
Usage Scenarios of Noscript
- Only allow trusted websites like online banking to run JavaScript and plugins
- Defend against cross-site scripting (XSS) attacks
- Protect against clickjacking attacks
- Secure routers and web applications from CSRF and DNS rebinding attacks
- Prevent exploitation of known and unknown security vulnerabilities (e.g., Meltdown or Spectre)
- Used as a key security component built into the Tor browser
Common Questions about Noscript
What does NoScript do?
How do I use NoScript?
What are the core features of NoScript?
What are the application scenarios of NoScript?
