NoScript 10 + New Version Releases

Thanks JR.

 

Perhaps you already mentioned it, but the biggest question is if the major bug when allowing scripts globally is already fixed?

 

I am sure that setting will be fixed sometime, otherwise, it would not appear in NoScript Options. Just have to be patient.

Bo

 

Beta 10.1.5.9rc1 has been released. Nice fix. NoScript menu looks better now.

v 10.1.5.9rc1
=============================================================
x Fixed out of scale rendering regression on high DPI screens

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.5.9rc1

Bo

 

Stable version 10.1.5.9 has also been released.

v 10.1.5.9
=============================================================
x Fixed some XSS false positives
x Fixed out of scale rendering regression on high DPI screens

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/?page=1#version-10.1.5.9

And beta 10.1.5.9rc2.

v 10.1.5.9rc2
=============================================================
x Fixed some XSS false positives

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.5.9rc2

Bo

 

I'm starting to think there is something in the new WebExtensions that prevents him from fixing this, perhaps some missing API?

 

Using the user interface in version 10.1.5.9, is anyone able to export their rules? I'm unable to.

(I did see one mention of this at hackademix by a user.)

 

That function seems to be broken as of right now. It has been reported.

Bo

 

Thats why we have to be patient.

Bo

 

Thanks for confirming, Bo. V10 is coming along well. Steady improvement since day one.

 

Yes, it is. Testing betas and seeing the new NoScript growing and developing from baby stage has been a blast.

Bo

 

Version 10.1.6 has been released.
https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/?page=1#version-10.1.6

10.1.6
=============================================================
x [XSS] Improved sensitivity of JSON whitelisting (thanks
@SamuraiFoochs for reporting)
x [XSS] Improved specificity of nested URL checks (thanks
@SamuraiFoochs for reporting)
x New configuration export implementation, more convoluted
but not requiring the "downloads" permission

As well as Beta 10.1.6rc1.
https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6rc1

v 10.1.6rc1
=============================================================
x [XSS] Improved sensitivity of JSON whitelisting (thanks
@SamuraiFoochs for reporting)
x [XSS] Improved specificity of nested URL checks (thanks
@SamuraiFoochs for reporting)
x New configuration export implementation, more convoluted
but not requiring the "downloads" permission

Bo

 

wshrugged, the Export feature got fixed in version 10.1.6. The exported settings file is a txt file now,.

Bo

 

I'm not using Fx anymore. See the following thread, which at the least you'll find informative (post #283, my thoughts at #289):
https://www.wilderssecurity.com/threads/mozilla-firefox.388154/page-12#post-2725626

Regardless, thank you for giving me the heads-up about the export feature. I'm not sure how NoScript will fit in my future.

 

I saw the link yesterday and watched about 3 minutes skipping through the video. After reading your post (here) today, I decided to watch the whole thing. In fact, I saw some parts of the video twice. Not because I am convinced of anything that he said but because I wanted to figure out why he is so angry at Mozilla. And he opens up about it, twice. He feels rejected, ignored by Mozilla. He probably tried to sell his services and they ignored him.

Bo

 

Here is another one.

Beta 10.1.6.1rc1, the UI became a little bit smaller. I like it better.
https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6.1rc1

v 10.1.6.1rc1
=============================================================
x Reduced UI sizes in desktop version
x Work-around for Firefox bug preventing the Export button
from working on non-Windows platforms

Before



After


Bo

 

Beta 10.1.6.2rc1 has been released. This version introduces interesting changes. A new independent button is now available for Temporary Trusted, and customization of global presets have been taken away from the NoScript menu, and they are sort of hidden now but easy to find in Options. In Options, customization of the presets can be done same way as before, nothing changed there.

v 10.1.6.2rc1
=============================================================
+ Individual temporary / permanent TRUSTED preset buttons
- Removed customizability of DEFAULT, TRUSTED and UNTRUSTED
preset from the popup (reported as a major source of
confusion) while keeping it in the Options tab
x Fixed policy serialization bug causing temporary TRUSTED
sites to be listed in the UNTRUSTED array as well (thanks
pal1000 for reporting)
x Fixed action icon being disabled on Options tabs and not
re-enabled when navigating away in the same tab (thanks
geek99 for reporting)
https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6.2rc1

Bo

 

One more beta for the day . Version 10.1.6.2rc2 has been released, fixes the Import function.

v 10.1.6.2rc2
=============================================================
x Better display on mobile devices in portrait mode
x Fixed focus bug on mobile devices
x Fixed confirmation prompt when loading Site Info for the
first time being ignored
x Fixed import feature failing on some full JSON "Classic"
export files (thanks Floe for reporting)
https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6.2rc2

Bo

 

NoScript v10.1.6.2 (December 30, 2017)

Spoiler: Changelog v10.1.6.2

v 10.1.6.2
=============================================================
+ Individual temporary / permanent TRUSTED preset buttons
- Removed customizability of DEFAULT, TRUSTED and UNTRUSTED
preset from the popup (reported as a major source of
confusion) while keeping it in the Options tab
x Better display on mobile devices in portrait mode
x Fixed focus bug on mobile devices
x Fixed confirmation prompt when loading Site Info for the
first time being ignored
x Fixed import feature failing on some full JSON "Classic"
export files (thanks Floe for reporting)
x Fixed policy serialization bug causing temporary TRUSTED
sites to be listed in the UNTRUSTED array as well (thanks
pal1000 for reporting)
x Fixed action icon being disabled on Options tabs and not
re-enabled when navigating away in the same tab (thanks
geek99 for reporting)

 

First (update) beta of the year. Version 10.1.6.3rc1 has been released, solid gold.

v 10.1.6.3rc1
=============================================================
x Domain matching now works also for manually entered TLDs
and pseudo-TLDs, such as "gov.us" or "cloudflare.net"

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6.3rc1

Bo

 

NoScript 10.1.6.3rc2 has been released. Nice changes.

v 10.1.6.3rc2
=============================================================
x Moved preset customization into its own (more discoverable)
global Options section, rather than embedded in assignment
x Improved validation of manual entries
x Needed capabilities highlighted also on short-hand domain
matched entries inside the CUSTOM preset

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/beta?page=1#version-10.1.6.3rc2

The presets



Capabilities highlighted in Custom preset



Bo

 

Has the major bug been fixed?