Noscript for Google Chrome?

Bug reports and enhancement requests
Locked
esheesle
Posts: 4
Joined: Fri Aug 20, 2010 3:44 pm

Re: Noscript for Google Chrome?

Post by esheesle » Fri Aug 20, 2010 4:51 pm

So NotScript provides at least some level of filtering, although it can be bypassed, at least its granular control beyond what we currently have.

Is there a way that noscript functionality could be plugged into privoxy or some other proxy software to eliminate the need for Chrome to supply the functionality?
Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/6.0.495.0 Safari/534.6

User avatar
Giorgio Maone
Site Admin
Posts: 8715
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript for Google Chrome?

Post by Giorgio Maone » Fri Aug 20, 2010 5:02 pm

esheesle wrote:So NotScript provides at least some level of filtering, although it can be bypassed, at least its granular control beyond what we currently have.

Is there a way that noscript functionality could be plugged into privoxy or some other proxy software to eliminate the need for Chrome to supply the functionality?

Unfortunately not, because there are so many ways to obfuscate active content while it goes through the pipes (i.e. before it gets parsed by the browser) that trying to block it through a proxy (even though it's been attempted by proxomitron and similar projects) is futile.

I pinged againg some Google acquaintances of mine to speed up the "NoScript API" work yesterday, but I've been told that, even though it has been accepted, it's not scheduled yet :(
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3339
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: Noscript for Google Chrome?

Post by GµårÐïåñ » Fri Aug 20, 2010 6:50 pm

optimalcycling wrote:I've put the disclaimer that NotScripts is not affiliated with NoScripts for Firefox on both my website and on the Google Chrome extension page. I've also put links back to http://noscript.net on my website, the NotScripts about page in the extension, and on the Google Chrome extension page: https://chrome.google.com/extensions/de ... dajjpkkcfn


I understand what you are saying but it is a fact of human nature that when you make something so similar it WILL be confused by a portion of the population and it is not until they realize something is wrong and come complaining that they realize, its not by the same people. I think there was absolutely NO GOOD REASON, to make it so similar (varying by only a 't' in the middle and 's' at the end). You could have called it a hundred different things that would express your product's intention without relying so heavily on the similarity in the name. The fact is whether you like to admit it or not, that you are playing on the success of NoScript and the name recognition to drive attention to your extension. Simple as that and if you deny it, you are being less than sincere and truthful. I've said my piece, so the rest is up to others, but wanted to make sure the objection was on the record so that when the proverbial crap hits the fan, no one acts surprised or shocked.

It should also be noted, that even YOU who supposedly knows the difference, called it NoScripts (see emphasis) so you think everyone is going to know clearly they are different?
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

BFarmer1980
Posts: 1
Joined: Fri Sep 03, 2010 3:09 am

Re: Noscript for Google Chrome?

Post by BFarmer1980 » Fri Sep 03, 2010 3:13 am

Well, it's to be expected that NotScripts is not going to be able to provide the same level of protection as NoScript due to Chrome's limitations alone. But, the fact that it does provide us with at least some of the basic functionality and a bit higher level of protection is to be applauded. It may even be enough to convince me to make the full switch to Chrome as my primary browser while I wait patiently for NoScript to be "cleared for landing," so to speak, on Chrome.
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 (.NET CLR 3.5.30729)

fichal
Posts: 2
Joined: Wed Jun 16, 2010 6:05 pm

Re: Noscript for Google Chrome?

Post by fichal » Wed Sep 15, 2010 4:41 am

Does this Notifications of Web Request and Navigation API, as (partially, probably, so far) implemented according to bug 50943 provide the necessary support for NoScript?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b5) Gecko/20100101 Firefox/4.0b5

User avatar
Giorgio Maone
Site Admin
Posts: 8715
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript for Google Chrome?

Post by Giorgio Maone » Wed Sep 15, 2010 6:33 am

fichal wrote:Does this Notifications of Web Request and Navigation API, as (partially, probably, so far) implemented according to bug 50943 provide the necessary support for NoScript?

This is a part, though it's not useful to block inline scripts (but is useful to implement ABE-like functionality, for instance).
For inline script blocking I've been told but some Google security staffers that there's some ongoing unofficial work for a "NoScript API" in Chromium.
Since these security guys at Google are also NoScript users, and eagerly waiting for NoScript to come on Chrome, I'm confident I'll be notified of interesting progresses as soon as they happen.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.9) Gecko/20100824 Firefox/3.6.9

Nootherids
Posts: 1
Joined: Wed Nov 17, 2010 1:59 pm

Re: Noscript for Google Chrome?

Post by Nootherids » Wed Nov 17, 2010 2:05 pm

Is there any update on this?

My FireFox is having too many lag problems and I can't pinpoint the culprit. So I gave Chrome a try and I am really liking their minimalistic look, although some page loads seem to take much longer than FF. I've been installing extensions for Chrome all day and the one that I could not find anywhere was my most prized add-on in FF...NoScript!

So has there been any update on when/if this will be available? I don't like having two browsers that I have to switch back and forth from, bad enough I need to keep IE for those sites that require it. And I also was never aware of how much tracking is really going on throughout all internet pages until I started using NoScript. Not I'm not too comfortable using Chrome cause I know that data is being sent all over the place without my knowledge and because I don't like all the extra add-on crap. I like my browsing to be straight simple and to the point.

Updates?
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12

nickr
Posts: 17
Joined: Thu Jan 27, 2011 5:26 pm

Re: Noscript for Google Chrome?

Post by nickr » Mon Mar 07, 2011 8:10 pm

Is NoScript working in Chromium/Chrome a matter of "It will work eventually"--code just needs to be written to allow it to work. Or is there something in Chromium's design that just prevents an extension like NoScript from ever working in it?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15 (.NET CLR 3.5.30729)

User avatar
Giorgio Maone
Site Admin
Posts: 8715
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript for Google Chrome?

Post by Giorgio Maone » Mon Mar 07, 2011 8:21 pm

nickr wrote:Is NoScript working in Chromium/Chrome a matter of "It will work eventually"--code just needs to be written to allow it to work. Or is there something in Chromium's design that just prevents an extension like NoScript from ever working in it?


At this moment one of the major obstacles is the multi-processing design choosen by Chromium, which forbids every kind of synchronous communication between chrome and content and therefore prevents critical configuration data (e.g. NoScript's whitelist) from being safely and reliably shared across the application. Other APIs, especially in the networking area, are missing as well.

By comparison Electrolysis (E10s), the new multi-processing design choosen by future Firefox (and current Firefox Mobile betas) poses challenges, but they're not impossible ("code just needs to be written") and in fact NoScript is being adapted.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15

jimbo2150
Posts: 1
Joined: Sat Mar 12, 2011 5:03 pm

Re: Noscript for Google Chrome?

Post by jimbo2150 » Sat Mar 12, 2011 5:14 pm

Giorgio Maone wrote:
nickr wrote:At this moment one of the major obstacles is the multi-processing design choosen by Chromium, which forbids every kind of synchronous communication between chrome and content and therefore prevents critical configuration data (e.g. NoScript's whitelist) from being safely and reliably shared across the application.


Setting the other issues aside why does the data have to be synchronous? I am not a browser expert but I believe both Firefox and Chrome support WebWorkers and SharedWorkers. Wouldn't you be able to create a SharedWorker when the browser and extension are loaded which could then be queried by extension code loaded in each tab that would query "Here's the URL, is it on the whitelist?" to which the SharedWorker would perform the search (or possibly spawn other workers to search, allowing simultaneous searches to be performed) on an extension whitelist file or perhaps load the file into memory or the HTML5 application database and respond "Yes" or "No"?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0) Gecko/20100101 Firefox/4.0

dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: Noscript for Google Chrome?

Post by dhouwn » Sat Mar 12, 2011 7:26 pm

You probably want to know the result of whether a destination is trusted before it is loaded. ;)
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b13pre) Gecko/20110311 Firefox/4.0b13pre

nickr
Posts: 17
Joined: Thu Jan 27, 2011 5:26 pm

Re: Noscript for Google Chrome?

Post by nickr » Tue Mar 15, 2011 10:03 pm

Here's a link to the bug that prevents NoScript from working (please correct this post if I'm wrong!)

http://code.google.com/p/chromium/issue ... l?id=54257

Guys, once you create an account and login, immediately to the left of where it says "Issue 54257" a star icon will appear. Click on it to communicate to Google that you want this issue fixed. The more stars it gets, the higher its priority on the fix-list.
Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Ubuntu/10.04 Chromium/10.0.648.133 Chrome/10.0.648.133 Safari/534.16

nzpossum
Posts: 6
Joined: Tue Nov 24, 2009 11:56 pm

Re: Noscript for Google Chrome?

Post by nzpossum » Wed Mar 16, 2011 3:11 am

And this bug as well.

http://goo.gl/OxIuw
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.134 Safari/534.16

Dukeswharf
Posts: 13
Joined: Mon Nov 08, 2010 5:24 pm

Re: Noscript for Google Chrome?

Post by Dukeswharf » Wed Aug 17, 2011 1:35 pm

Giorgio,

What's the situation with NoScript for Chrome? Can I now look at Chrome with a serious eye!?!

Your plugin not being available for Chrome has been the sole reason I have remained faithful to Firefox.

Regards
Duke
Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0

User avatar
Giorgio Maone
Site Admin
Posts: 8715
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Noscript for Google Chrome?

Post by Giorgio Maone » Wed Aug 17, 2011 2:29 pm

Dukeswharf wrote:What's the situation with NoScript for Chrome?

I've been recently contacted by the Chromium privacy team, who offered to ease the porting by lobbying for the necessary changes to be implemented in the browser.
We're currently cooperating to that aim, but it won't happen overnight.
May I ask you what, exactly, makes Chrome a better choice than Firefox for you?
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:6.0) Gecko/20100101 Firefox/6.0

Locked