Script parser

[mcpsr]

Hello everyone,

can you give me some tips on where I can get in noscript source code the script parse in HTML page? Just want to review it but can just find it.

Thanks in advance,
have a nice day

[Giorgio Maone]

If you mean for script blocking purposes, NoScript does NOT parse the HTML source (e.g. for stripping out <script> tags or event attributes) but relies on CSP to block content loading and execution.

A NoScript component which actually involves some amount of HTML scanning instead, mostly via regular expressions, and on Firefox only, is the XSS injection checker.