NoScript Firefox Add-on

[watercooled]

I've heard that NoScript is a good add-on for Firefox for improving security. Is it a legit (safe) add-on and what are your opinions on it?
Thanks

[Leggie]

It is safe. I personally don't use it, however, since I think it's a bit too much like overkill. The vast majority of Javascript is perfectly safe; the few malicious scripts should be pretty easy to avoid just by sensible browsing.

You might find this article interesting.

[watercooled]

That's a good article, thanks. Don't think I'll bother with it for now then.

[thestjohn]

What I would add to that article is that you can run NoScript in blacklist mode, globally allowing scripts as you browse, whilst still protecting yourself against cross-site scripting exploits and clickjacking, XSS exploits in particular being on the rise and found even on legitimate sites, Facebook and Twitter being recent examples.

But yes, it does come down to how paranoid you are whilst surfing. NoScript can be a hassle if you let it, so I wouldn't say it's a must-have. But it does make browsing safer.

[smargh]

NoScript is awesome. I, my mother, and my sister, all use it and don't have a problem. As long as they know how to enable scripts on the site when something doesn't work, it's fine.

[cheesemp]

<DeveloperRant>
It does make web developing for people who have it a real pain in the arse! And yes I know about web standards but its getting harder and harder to get a site working well in IE6/IE7/IE8/FF/Opera/Safari etc without having to worry about people not having JavaScript on!
</DeveloperRant>

[rs4847]

Browsing the web these days using Firefox without NoScript+Adblock is a bit like having unprotected sex with a new partner...

[Splash]

Browsing the web these days using Firefox without NoScript+Adblock is a bit like having unprotected sex with a new partner...

...in a zoo. Inside the tiger cage. Just before they get fed.


Granted, I don't use Adblock as NoScript fills my needs but I think anyone running a browser (especially as a privileged user) without some sort of script blocking needs their heads looking at.

[watercooled]

Thanks guys, I think I'll get it now. Can someone confirm the download page though, so I get the real thing. Thanks again

[rs4847]

NoScript: http://noscript.net/

AdBlock (if you need it): http://adblockplus.org/en/