NoScript

Active

Country: Italy (IT)
Founded: 2005
Developer: Giorgio Maone
Pricing: Free (open-source)
Open source: Yes
Platforms: Firefox, Chrome, Edge, Brave, Android (Firefox)

Indexes

Ad Blockers

Overview

NoScript is a free open-source browser extension that blocks JavaScript and other potentially harmful active content by default, allowing execution only on user-trusted sites. It provides granular control over script execution, objects, media, frames, fonts, WebGL, fetch requests, and more through preset trust levels (Default, Trusted, Untrusted, Custom). Designed for users prioritizing security and privacy, it stands out as a key component of the Tor Browser for its pre-emptive blocking and anti-XSS protection.¹³⁵

Key Features

Pre-emptive Script Blocking - Blocks JavaScript and active content from untrusted sites to prevent exploitation of vulnerabilities.
Trust Levels - Applies Default, Trusted, Untrusted, or Custom scopes to control capabilities per domain.
Anti-XSS Protection - Filters cross-site scripting attacks, including sanitization of suspicious requests.
Granular Capability Control - Toggles individual permissions for script, object, media, frame, font, WebGL, fetch, and other.
Application Boundaries Enforcer (ABE) - Enforces contextual blocking policies based on request origin and destination.
LAN Protection - Shields local network endpoints from browser-based attacks.
Whitelist Management - Manages trusted/untrusted domains with import/export for backups.

Pricing

Plan	Price	Includes
Free	$0	Full access to all features

Platforms & Requirements

NoScript runs as a WebExtension on desktop browsers like Firefox, Chrome, Edge, and Brave, and on Firefox for Android; mobile support is limited to Firefox Android. No specific minimum requirements beyond browser compatibility for WebExtensions. Incognito/private mode support requires manual enabling during installation.¹³⁵

Integrations & Ecosystem

Tor Browser (built-in security component)
Firefox profile storage for settings
Whitelist import/export
Cross-browser WebExtension API

Alternatives

App	Difference
uBlock Origin	Focuses on ad/tracker blocking with element picker; less emphasis on script granularity than NoScript.
uMatrix	Matrix-style per-domain permissions for requests; discontinued and requires manual updates.
ScriptSafe	Similar script blocker for Chrome; less actively maintained than NoScript.
AdBlock Plus	Primarily ad blocking with allowlisting; lacks NoScript's deep script and XSS controls.

Reputation

NoScript is highly regarded in security communities for its robust protection against drive-by exploits and XSS, serving as the Tor Browser's security backbone. Users praise its fine-grained control but criticize the steep learning curve and breakage of modern sites requiring extensive whitelisting configuration. Ongoing development addresses WebExtension transitions, maintaining relevance despite usability challenges for non-experts.¹³⁴⁹

Sources (9)