Script parser

Ask for help about NoScript, no registration needed to post
mcpsr

Script parser

Post by mcpsr »

Hello everyone,

can you give me some tips on where I can get in noscript source code the script parse in HTML page? Just want to review it but can just find it.

Thanks in advance,
have a nice day :D
Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Script parser

Post by Giorgio Maone »

If you mean for script blocking purposes, NoScript does NOT parse the HTML source (e.g. for stripping out <script> tags or event attributes) but relies on CSP to block content loading and execution.

A NoScript component which actually involves some amount of HTML scanning instead, mostly via regular expressions, and on Firefox only, is the XSS injection checker.
Mozilla/5.0 (X11; Linux x86_64; rv:101.0) Gecko/20100101 Firefox/101.0
Post Reply