Integrates workaround for a Gecko URL parsing quirk

Aug 29, 2012 12:49 GMT  ·  By

The latest version for NoScript, the Firefox extension for script blocking, is 2.5.3. It brings to the table a set of four bug fixes and one new feature.

The current revision repairs two issues related to XSS (cross-site scripting), one of which generated false positives on URLs that contained an ASP.NET cookieless session identifier. The second fix refers to a workaround for a Gecko URL parsing glitch.

Another fix deals with JavaScript URL non-void expression evaluation in the URL bar, which caused scripts to get globally allowed. Furthermore, the add-on now limits the mousedown + DEL key floating popup erasing feature to pages where scripts are forbidden and to absolute or fixed position elements.

New in this release is the option to switch the mousedown + DEL key floating popup erasing feature off and on from about:config preferences.