Protects against XSS and HTTP response splitting combined attack

Jan 13, 2012 13:01 GMT  ·  By

Giorgio Maone has recently released a new version for his Firefox add-on, NoScript. The new build is 2.2.6 and it was launched with only one release candidate paving its path.

There aren’t too many changes since the release of the previous version, which had no less than three release candidates to solve various issues.

NoScript 2.2.6 added protection against an attack that is a combination of a new kind of HTTP response splitting and cross-site scripting (XSS). The new feature was included in the release candidate for version 2.2.6. In the stable release the developer fixed sanitization reporting bug.

NoScript is an extension for Firefox and other Mozilla-based web browsers, designed to offer extra protection while browsing. It is open-source and gives you the possibility to allow plugins (JavaScrips, Flash, etc.) to be executed only by trusted websites.

You can download NoScript from this page