Many people do not like to use the NoScript add-on for Firefox because it is pretty restrictive out of the box and requires time to tune it to where you do not notice it running. While I can certainly understand this point of view, one thing you may not know is that even if allow global scripts to run (which removes the restrictions people find annoying), NoScript still protects you from XSS.
If you are not familiar with what XSS is, you can read the full description of the protection provided by NoScript on their site.
Cross-Site Scripting (XSS) vulnerabilities are usually programming errors made by web developers, which allow an attacker to inject his own malicious code from a certain site into a different site. They can be used, for instance, to steal your authentication credentials and, more in general, to impersonate you on the victim site (e.g. your online banking or your web mail).
While there is no doubt taking advantage of NoScript’s full range of protection will give you significant protection, at the very least the XSS protection alone makes this add-on worth having.
Like what you read?
If so, please join over 28,000 people who receive our exclusive weekly newsletter and computer tips, and get FREE COPIES of 5 eBooks we created, as our gift to you for subscribing. Just enter your name and email below:
