Script parser

Ask for help about NoScript, no registration needed to post

Script parser

Post by mcpsr » Thu May 12, 2022 10:50 pm

Hello everyone,

can you give me some tips on where I can get in noscript source code the script parse in HTML page? Just want to review it but can just find it.

Thanks in advance,
have a nice day :D
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0

User avatar
Giorgio Maone
Site Admin
Posts: 9308
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: Script parser

Post by Giorgio Maone » Fri May 13, 2022 6:05 am

If you mean for script blocking purposes, NoScript does NOT parse the HTML source (e.g. for stripping out <script> tags or event attributes) but relies on CSP to block content loading and execution.

A NoScript component which actually involves some amount of HTML scanning instead, mostly via regular expressions, and on Firefox only, is the XSS injection checker.
Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.0

Post Reply