NoScript Updates

NoScript 1.7.7

Tue, 15 Jul 2008 14:42:24 GMT

x QA for release
x Localization updates
x Moved changelog online and removed full GPL text to reduce XPI size

NoScript 1.7.6

Sat, 05 Jul 2008 13:10:19 GMT

x QA for release

NoScript 1.7.4

Sun, 29 Jun 2008 15:30:38 GMT

+ Force top level site to be always the most reachable in the menu
  (on the bottom)
x Fixed import issue with edited lists using DOS newlines
x Minor cascading permissions bug fixes (sometimes a subdomain was
  not removed from the blacklist when its parent was whitelisted,
  leading to usability confusion because blacklist always prevails)
x Experimental work-around for a WMP crash when a page containing an
  embedded movie is opened in the same window where another movie
  is already playing (thanks SledgeFox for reporting)

NoScript 1.7.1

Wed, 25 Jun 2008 18:13:36 GMT

+ JS redirect detector sensibility enhancement (thanks timeless)
+ "Temporarily allow all this page" command made visible by default

NoScript 1.6.9.3

Mon, 16 Jun 2008 17:43:25 GMT

x Fixed Injection Checker false positive regression on URIs which
  contain encoded newline characters (thanks Kostas)

NoScript 1.6.9.2

Mon, 16 Jun 2008 13:50:16 GMT

x Fixed Injection Checker checking ASCII 43 as a "plus" sign but not
  as a www-form-encoded space (thanks Sirdarckcat for report)
x Google search anti-XSS exception now checks for real TLDs, rather
  than short 2nd level domains (thanks Sirdarckcat for report)
+ Refactored unescaping flow, allowing for easier extension
+ Ebay-style unescaping

NoScript 1.6.9.1

Sun, 15 Jun 2008 15:34:53 GMT

+ Improved XSS JavaScript unicode escape handling
+ Recursive JSON reduction, dramatically cutting analysis time on
  complex JSON URLs, e.g. for some Orkut widgets
x Critical work-around for
  https://bugzilla.mozilla.org/show_bug.cgi?id=439276

NoScript 1.6.9

Sat, 07 Jun 2008 15:47:31 GMT

+ Firefox 3.1a1pre compatibility
x Faster Base64 injection checks

NoScript 1.6.8

Tue, 10 Jun 2008 21:57:10 GMT

x Fixed false positives in new Base64 decoding Injection Checker

NoScript 1.6.7

Fri, 30 May 2008 18:14:43 GMT

+ Base64 decoding in URI Injection Checker, thanks Zoiz for Yahoo PoC
  -- see http://zoiz.web.id/xss-corner/base64-encoded-xss.html
x Extra NOSCRIPT element showing won't add SCRIPT elements on buggy
  pages like evite.com (thanks zgendron and other reporters)

NoScript 1.6.5

Fri, 09 May 2008 16:31:11 GMT

x Fixed XSS URL sanitization issue with some proxy configurations
  (thanks Philipp Gühring for reporting and testing)
x Fixed false positives caused by Image(...).jpg file names

NoScript 1.6.4

Sun, 27 Apr 2008 10:37:28 GMT

x More effective cross-site POST blocking
+ Estonian translation (thanks aivo)

NoScript 1.6

Mon, 14 Apr 2008 21:31:17 GMT

+ Specific shadowed status icon for pages where some origins are
  allowed and all the remaining have been marked as untrusted
+ Reviewed Russian translation (Alexander Sokolov and Sergei Smirnov)
x Dropped blockCssScanners code (SafeHistory and SafeCache extensions
  provide better prevention against navigation history sniffing)
+ Further QA for release

NoScript 1.5.8

Thu, 10 Apr 2008 07:04:04 GMT

x Optimization of Injection Checker for iGoogle Calendar Widget
  (thanks JonCage for report)
x Fixed edge-case false positives due to URL encoding mixed to 
  symmetric brackets(thanks Lundholm for report)
x Fixed legacy Seamonkey UI regression introduced by Songbird 
  compatibility (thanks therube for report)

NoScript 1.5.6

Fri, 28 Mar 2008 05:48:10 GMT

+ Bracket balancing for inline JS literal-breaking micro injections

NoScript 1.5.2

Mon, 17 Mar 2008 14:24:35 GMT

x Slightly revised icon set (thanks Karlosak and WAPCE for hints)
x Fixed bookmarklets invoked twice on untrusted sites (thanks al_9x)

NoScript 1.5

Sun, 16 Mar 2008 18:47:49 GMT

+ Slovenian translation (thanks Tomaž Mačus)
x Special bookmark management made compatible with Suiterunner's
  sidebar (thanks therube for reporting)
x Extra QA for release

NoScript 1.4.9.5

Thu, 06 Mar 2008 22:27:42 GMT

x Version bump for Firefox 3.0b5pre

NoScript 1.4.9

Wed, 27 Feb 2008 11:38:57 GMT

+ Improved Silverlight object identity based on "source" param

NoScript 1.4

Fri, 15 Feb 2008 14:45:40 GMT

+ Updated translations
x Revised window.name injection checks to be more lenient on GModules
x Extra QA for release
x Fixed about dialog size to correctly show contributor list in any
  language