Security Test Browserscope

sampei.nihira · Post by **sampei.nihira** » Sat Apr 12, 2014 4:45 pm

http://www.browserscope.org/security/test

My test:

Windows XP Home SP3
Firefox 28 + Noscript
score 16/17 (fail Origin header)

You can get 17/17 ?
Sorry my bad English.

Post by **Giorgio Maone** » Sat Apr 12, 2014 8:47 pm

You're basically asking NoScript of fix/work-around Mozilla's bug 446344, which is mostly a cosmetic one since adopting the whole CORS is much more reliable/robust than relying on the Origin header being sent for any request (and also maybe less privacy disputable).
Answer is: maybe, I must consider all the implications (especially the privacy-related ones).

sampei.nihira · Post by **sampei.nihira** » Sun Apr 13, 2014 5:07 pm

Giorgio Maone wrote:You're basically asking NoScript of fix/work-around Mozilla's bug 446344, which is mostly a cosmetic one since adopting the whole CORS is much more reliable/robust than relying on the Origin header being sent for any request (and also maybe less privacy disputable).
Answer is: maybe, I must consider all the implications (especially the privacy-related ones).

TH Giorgio.
It would be a very interesting thing.
Good Luck!!

InformAction Forums

Security Test Browserscope

Security Test Browserscope

Re: Security Test Browserscope

Re: Security Test Browserscope