New Update NoScript Security Suite

v 11.5.1
============================================================
x [nscl] Panic abort on buggy pages (like GitHub · Build and ship software on a single, collaborative platform) going in infinite loops when webgl is disabled
x Refactoring to use DocRewriter
x [tor-browser#43258] Remove content script crypto.subtle dependency
x Synchronize Sites.onionSecure on any settings update
x [tor-browser#32668] More reliable Security Level Reset on Tor / Mullvad Browser
 
v 11.5.2
============================================================
x [tor-browser#43257] More efficient, flexible and race-resistant placeholder styling
 
v 12.1.1
============================================================
x Fix automatic reloading broken if the background script / service worker is not already initialized on UI load
x Re-enable signing logging

v 12.1
============================================================
x [nscl] Improved work-around for Youtube placeholder displacement (tor-browser#43296)
x [L10n] Updated pl
x Avoid synchronous policy fetching if document is already complete (e.g. on extension updates)
x Remove more MV3-only entries from MV2 manifest
x Remove pre-release version check on signing
x More informative debug logging
x Fixed misplaced update_url in development builds (thanks DJ-Leith for reporting)
x Switch Firefox development build version format to *.9xx (like Chromium)
x Cross-browser and cross-manifest compatibility down to Gecko 115
x Improved cross-browser and cross-manifest development and build ergonomics
x Fixed RequestGuard on Firefox still using CSP.blocks() as an instance method
x Improved cross-browser and cross-manifest support
x Do not reload affected tabs before saving XSS user choices, if any
x [nscl] Several performance and reliability enhancements from NSCL
x [nscl] Updated to latest NoScript Commons Library
x Fixed offscreen placeholder container preventing user interaction on the left of placeholders (tor-browser#43282)
x Fix localization-related console spam when opening options panel (tor-browser#43269)
x Fixed offscreen placeholder container preventing user interaction on the left of placeholders (tor-browser#43282)
x Fix localization-related console spam when opening options panel (tor-browser#43269)
 
v 12.6
============================================================
x Make contextual policies override restriction cascading (tor-browser#43397)
x [Chromium] Fix 12.5.9xx prompt closure regression
x [Chromium] Full x-load checks Chromium support
x Better offscreen placeholders for x-load
x [l10n] [Chromium] Make x-load capability localization Chromium-compatible
x [L10n] Updated de, fr, he, ru, tr zh_CN
x [UX] Honor non-contextual x-load capability granted from NoScript Options (thanks barbaz for RFE)
x Prevent data: URIs from messing with srcset parsing (thanks fatboy for reporting)
x Regard as "mutually safe" for x-load directories sharing a common ancestor
x [UX] Make x-load capability visible for CUSTOM file: entries in NoScript Options (thanks barbaz for RFE)
x [UX] Fixed prompt window leaks (tor-browser#43281)
x [UX] Make object unblocking temporary and contextual by default, with choices in the prompt
x [nscl] Option to clone Permissions without context
x Always honor the "Collapse blocked objects" option
x Refactor top-level auto-trust and make it contextual (issue #417)
x [nscl] Remove noisy debug statement
x [UX] UI support for extra floating capabilities (x-load)
x Integrate event handlers suppression with blocking if needed (thanks Adithya Suresh Kumar for reporting)
x [nscl] Refactor xray proxification
x Fix incorrect assumptions about some DOM element properties reflecting URLs (thanks Adithya Suresh Kumar for reporting)
x [nscl] Fix race condition between multiple extensions using MV3/DNR SyncMessage (JShelter#146, thanks polcak for reporting)
x Suppress some event handlers (tor-browser#43491, thanks Adithya Suresh Kumar for reporting)
x [build] Publish XPIs only after their signed
x [build] Improved version bump commit logic
 
v 13.0.8
============================================================
x Reduce annoyances and false positives from sidebar content detection (issue #444)
x Fix automatic top level trust conflict with existing contextual policies (issue #441)
 
v 13.0.9
============================================================
x [UX] Increase contrast for non-HTTPS site labels in dark mode (thanks Soothsayer for reporting)
x [L10n] Updated he, pl, tr, uk
x [Tor] Align Tor/Mullvad Browser integration logic and UI with "persistent mode" (mullvad-browser#455)
x Switch to ?. operator and tidy up surrounding code
 
curious your post has no Like button on my screen. Is this something you control or perhaps new feature or bug on MT? I'm lately seeing about 1 in 20 posts now with no like button
PS so 13.0.9 is the current version, my firefox shows this version but updated as of 18 August...?
 
  • Like
Reactions: lokamoka820
curious your post has no Like button on my screen. Is this something you control or perhaps new feature or bug on MT? I'm lately seeing about 1 in 20 posts now with no like button
PS so 13.0.9 is the current version, my firefox shows this version but updated as of 18 August...?
I think it's a bug or some HTML/CSS elements aren't fully loaded. I've noticed that some icons aren't appearing in the posts (about one icon per page).

Regarding the latest version, it was released about two months ago.
 
  • Thanks
Reactions: simmerskool
NoScript v13.1
v 13.1
============================================================
x New wasm capability to control WebAssembly per site
x [L10n] Updated is, pt_BR
x Adopt the Chromium prefetch CSS CORS work-around on Gecko
(torbrowser#44239 fix)
x Best effort to avoid extra temporary tabs for sidebar
detection
 
NoScript v13.2.1
v 13.2.1
============================================================
x Fix bugs with Tor Browser unknown capabilities handling
x Work-around for Tor Browser Security Levels not being
aware yet of the wasm capability
x [nscl] Make wasm usage attempt notification
Chromium-compatible
x [L10n] Updated de, ru, tr
 
NoScript v13.2.2
v 13.2.2
============================================================
x Work-around for issue #462
x [L10n] Updated fr, pl, zh_CN
x Resolve implicit dependencies from createHTMLElement()
x [Android] Erase temporary permissions when all the tabs
closed (issue #464)
x [Android] Make NoScript Options' top buttons fit in one
row
x Typo in comment in LifeCycle.js
 
NoScript v13.4 (already released for Chrome)
v 13.4
============================================================
x [UX] More concise and compact placeholders
x [UX] Include all the suppported capability types in the
tooltip blocked/used report

v 13.3
============================================================
x [UX] [nscl] In-content placeholders for Wasm
(tor-browser#44278)
x [nscl] Fixed race condition potentially breaking
placeholders in edge cases
x [nscl] Detect asynchronous failed WebAssembly access
attempts (tor-browser#44278)
 
NoScript v13.5 released for Chrome... Update: released also for Firefox
v 13.5
============================================================
x [UX] Show onboarding page on settings reset
x [l10n] Lowered Transifex merge threshold to 50%
x [L10n] Updated bn, br, ca, da, el, es, fa, ja, lt, ms, nb,
ro, sv_SE
x [UX] Scary styling for restrictions disablement option
x [UX] Turn on restrictions when a behavior is selected
x [UX] Zoom-in site classification behavior transition
x [L10n] Updated de, fi, fr, he, is, it, mk, nl, pl, pt_BR,
pt_PT, ru, sq, tr, uk, zh_CN, zh_TW
x [UX] Improved modifier button styling
x [UX] Colorized site classification behavior options
x [UX] Implement first install onboarding page
x [UX] Further behavior UI synchronization fixes (thanks
fatboy for reporting)
x [UX] Various style tweaks for Android
x Fixed autoAllowTop bug on Chromium
x [UX] Fixed some user-visible messages (thanks Tonnes for
reporting)
x [UX] Fix possible race condition on classification
behavior UI initialization (thanks fatboy for reporting)
x [UX] Classification behavior: improved code formatting and
synchronization
x [UX] Support links
x [UX] Added missing bidirectional UI synchronization step
x [UX] Complete classification behavior wiring
x [UX] Hide classification behavior UI in Tor/Mullvad
browsers
x [L10n] Updated de, fa, fi, fr, it, nl, pl, pt_BR, pt_PT,
ro, ru, sq, tr, zh_CN, zh_TW
x [UX] "Site Classification Behavior" (usability level)
selector
x [UX] Support multiple UI listeners
x [UX] Handle more media placeholder edge cases
x [UX] Localize capabilities in status tooltip
x [UX] Fix DEFAULT wrongly styled as canScript on unsafe
URLs
x [nscl] Fixed DomFreezer regression on first file:// load
due to onbeforescriptexecuted deprecation (thanks Anton K
for reporting)
x [L10n] Updated nl
x `build.sh +` automatically increments current version
x [UX] Always show the stricter top-level site match on top
of the list (thanks fatboy for suggestion)
x [UX] Do not show CASCADED label for DEFAULT entries
matching the top-level site
x [UX] More cascading permissions bug fixes
x [L10n] Multiple localization updates
x [UX] Improved visual feedback for cascaded permissions
(thanks fatboy for bug reporting)
x [UX] Cascading permissions frontend
x [nscl] [UX] Force artificial placeholders creation on
x.com even if no real media object is in the DOM
x [nscl] Cascading permissions support (backend)
x [nscl] Do not let AUTO-TRUSTED override policies other
than DEFAULT
x [L10n] Updated de, fr, ru
x [UX] Fixed theme configuration caching bug
x [UX] Fix AUTO-TRUSTED preset titles
x [UX] Improved UI labeling for automatically trusted
top-level sites
x [L10n] Updated it
x Imported settings version migration support
x Export settings metadata and versioning support
x Mitigate x-load protection affecting file:// documents
load times (issue #455, thanks Meludall for patch)
x [UX] Better handling of clicks on obstructed placeholders
x [UX] More concise and compact placeholders
x [UX] Include all the suppported capability types in the
tooltip blocked/used report
 
Last edited:
NoScript v13.5.1 already released for Chrome...
v 13.5.1
============================================================
x Soft-reload must be performed off-document if scripts had
been suppressed by document freezing (fixes #489)
x [UX] Dismiss classification behavior UI when
tapping/clicking the background (like a popup)
x [nscl] [UX] Start playing click-to-play media elements as
soon as they get enabled
x Fix infinite recursion in theme CSS cleanup regular
expression
x [L10n] Updated sq
x [Tor] Self-hosted builds deployment automation
x Tor self-hosting build support
 
NoScript v13.5.3 already available on Chrome Web Store
v 13.5.3
============================================================
x Wakeup TabCache from DNRPolicy (issue #497)
x More logging and belt+suspenders for #497
x [Chromium] Better fix for startup MV3 DNR tab-bound rules
race condition (issue #497)
x [UX] Improve prompt labels (thanks fatboy for suggestion)
x Refactor toLabel() into Sites
x [Chromium] Fixed race conditions with MV3 DNR tab-specific
rules (issues #495 and #497)
x [L10n] Updated tr
 
NoScript v13.5.4 already available on Chrome Web Store NoScript - Chrome Web Store

v 13.5.4
============================================================
x [UX] Fix regression in sites UI live reload (issue #500)
 
Last edited:
NoScript v13.5.5 (already available for Firefox)
v 13.5.5
============================================================
x [nscl] DocumentFreezer bug fixes and improvements (fixes
#496)
x [nscl] Improved DocRewriter web compatibility (see
tor-browser#44450)
 
No Script used to be the holy grail in XP times. What strikes me that it did adapt to Chrome's sandbox and Mv3.

The NoScript libraries are also used by SpyShelter, so it seems actively developed.

Lately new categories were added (unlimited CSS after the uBo breach a few years ago and lately WebAssembly).

Just wonder how many people are still using it.