CsFire extension for Firefox

Has anyone tried the CsFire extension for Firefox? I haven't seen it mentioned here before.

"CsFire autonomously protects you against dangerous or malicious cross-domain requests, such as Cross-Site Request Forgery (CSRF). CSRF is very prevalent and dangerous, as stated by the OWASP top 10, as well as the CWE/SANS top 25 programming errors."

https://addons.mozilla.org/en-US/firefox/addon/58189/

Does NoScript already provide this protection?

 

It does to some extent
http://noscript.net/abe/

 

Thanks for the reply.

People that don't like NoScript may find CsFire gives them some protection while being very quiet.

 

Yes, but it's necessary to add this USER rule

Code:

Site *
Accept from SELF
Anon

according to http://forums.informaction.com/viewtopic.php?f=7&t=3999&start=0&hilit=csfire&sid=3edf1c3bbcc117b4816d90851152cfed in order to mimic CsFire.

 

Thanks for the reply, but now I have a problem. I am unable to enter anything in the user defined rule box.

I'm using Vista Home with LUA and SRP. Toggling off the SRP does not help.

Regards

 

First of all, you have to click the USER ruleset. Now if you click the edit button you can select your favourite editor and Noscript will will remember your decision. Make your changes, save them in the editor and you will see them in Noscript.

 

I got as far as clicking on the edit button but wasn't sure what to do after that.

Thanks for your reply. It makes sense now.

 

You're welcome. As a matter of fact the just released v. 1.10 has a built-in ABE editor