avian2 / noscript Goto Github PK

A Firefox extension for whitelist driven safe JavaScript execution.

Shell 0.13% JavaScript 98.19% CSS 1.32% Python 0.17% GAP 0.19%

noscript's Introduction

Unofficial NoScript version history

This repository contains version history for the NoScript Firefox add-on up to around March 2018. This repository is no longer being updated. It predates the official noscript repository on GitHub.

As of July 2018, official noscript repository is here.

Files in the xpi/ subdirectory were automatically extracted from XPI files downloaded from https://addons.mozilla.org/en-US/firefox/addon/noscript.

This repository is not affiliated in any way with the developers of the NoScript add-on. Please do not report issues with NoScript itself here. Developers of the add-on can be reached at noscript.net.

For some background on why this repository was created, see this blog post.

Building

To build an XPI file, use makexpi.sh script:

$ ./makexpi.sh [commit]

License

Following copyright notice appears in the latest version at the time of writing. Please refer to the files in the xpi/ subdirectory for details.

NoScript - a Firefox extension for whitelist driven safe JavaScript execution
Copyright (C) 2004-2014 Giorgio Maone - [email protected]

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the
Free Software Foundation, Inc.,
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA

noscript's People

Contributors

Stargazers

Watchers

Forkers

lekensteyn pombredanne mcinglis petehemery freddyb angle1895 tieusangaka mousoujoker cowlicks neuroradiology metadings guradia chinesefree 0xrustlang amiralialavi

noscript's Issues

Feature request - pre-approved scripts

Not sure if this is the correct place to post feature requests, but here goes anyway.

Would it be possible to implement a functionality whereby specific sites can execute SPECIFIC pre-approved scripts? For example, the pre-approved script could be stored as a .js file in a "whitelist" folder, and would be linked to a specific domain (or subdomain or even a single page), and in order for that page to execute the script it would have to a) be stored entirely as a separate .js file on the server (no inline code) and b) have to be EXACTLY the same as the script file in the whitelist folder.

There could even be three different "modes": Strict, where everything (including comments and spacing) has to be EXACTLY the same, Normal, where the "minified" form of the script has to be the same as the minified form of the whitelist script, and possibly Loose, where the script simply requires to be signed by a valid signature for a pre-approved public key.

Requests

Hi, thanks for the great browser extension.

I would love to get involved with the code but don't have time yet, so I will post my ideas here for now:

Add the following:

Allow scripts from this host for this tab

Change the following:
I find 🚫 and ❗ signs a bit confusing, could we just have ❌ and ✔️ symbols?

Whitelist local domain

Is there any way to whitelist a domain like ".local"? "http://.local:0" doesn't seem to work.

I'm just trying to whitelist all *.local domains.

Misisng dev versions

http://noscript.net/getit has v2.6.8.8rc2, but the repository is only at 2.6.8.7. And looking at the history I don't see any rc versions after Feb 18, 2012. https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/ lists them so there shouldn't be any problem with fetching them...

Take a look at AMO2git

https://github.com/KOLANICH/AMO2git

And consider recreating this repo with it.

Feature request: be able to look at the scripts that were blocked without running them

Title says it all.

Thanks for all the great work you guys have done.

Feature Request: Temp allow all this chain

Hi,

I have an annoyance when I sign into one of my email clients that requires multiple Javascript based redirects. I trust the clients but do not store any history within my browser.

Would it be possible to have a temporarily allow all this frame for X seconds?

Alternatively maybe an allow all for X seconds, or even trust the page until there are no more redirects?

Thanks,

Andrew

tracking diffs is hard or impossible?

First of all, thank you for maintaining this mirror to provide insights into NoScript releases!

I came here to find out what has been fixed in release 2.6.9.32, by looking at the commit history - more specifically at this commit: 30a876b

For some reason this shows only changes in the install.rdf - Do you know why?

10.1.7rc1;
10.1.7rc2;

NS5

5.1.8.5rc2;
5.1.8.5rc3.

Various bug

I have several bugs with the newest version of Noscript.

Sometime I can't even click the links displayed in a google search until I disable Noscript
When I disabled Noscript, all my previous saved settings where lost (things like allowed/blocked sites and so on)
On some sites, even if I temporarily allow all the scripts, the site is still unusable until I disable Noscript (check blablacar f.e.)

Pocket troubleshoot

To get current Pocket version (15.08.2015) work with current NoScript version (2.6.9.35), add
about:pocket-saved (there is already about:pocket-save and about:pocket-signup) to your whitelist.

PS: I know this is just copy of noscript source code and not actual project.