In association with heise online

18 October 2011, 10:20

NoScript for Android now feature complete

  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

NoScript Mobile screenshot
Zoom NoScript Mobile catches an attempt to clickjack
Source: NoScript
The mobile version of NoScript, which has been in development for use with Firefox on Android or Maemo devices, has been declared feature complete. Nicknamed NoScript Anywhere, the alpha 8 version of NoScript for Mobile was described in a blog posting by its lead developer, Giorgio Maone, as now providing all the major features from the desktop version that "make sense on a mobile device".

This means that the plug-in can select, on a per site basis, which permissions scripts have. Simple presets (Easy Blacklist, Click To Play, Classic Whitelist and Full Protection) make it easy to configure. NoScript for Mobile also has anti-XSS filtering, ClearClick client side protection against clickjacking, and a web application filewall designed to protect against DNS rebinding and CSRF attacks on the local router. Script Surrogates have also been implemented that allow a site's scripts to be replaced or added to to allow it to work safely with NoScript.

NoScript for Mobile also implements synchronisation with other NoScript installations and installs without a browser restart. By default, NoScript for mobile will automatically block every script and embedded object until the user whitelists them.

Development moves quickly on NoScript, with NoScript 3 alpha 9 already available at the time of writing. It can be directly downloadedDirect download to Firefox Mobile. As with all alpha software, care should be taken not to use it in production or critical situations. NoScript is licensed under the GPL2 and is supported by the NL.Net Foundation.

See also:


Print Version | Send by email | Permalink:

  • July's Community Calendar

The H Open

The H Security

The H Developer

The H Internet Toolkit