Hi,
I jsut had a idea, not sure if its usefull/doable/a good idea.
I use the Certificat Patrol addon for firefox, which checks if a sites ssl-certifiacte has changed, and if so warns me (usualy new certs trigger this, but if someone can manage to trick some cert-issuer to certificate a bad cert this would get catched too. think about FBI ask for a facebook cert from verisign).
Anyway, my thought is, that most sites may change their content often nowadays (blogs, facebook, twitter), but the scripts on those sites usualy stay the same for a longer time. Would it be possible to let Noscript cache those scripts, and if a site adds new scripts or changes old ones, alert me.
This would allow to catch if someone placed a malicious script on a website I usualy trust (eg, not include from a other host, but have it on the same host)
Greetings
HP
[Feature] Certificate Patrol like JS change detection
[Feature] Certificate Patrol like JS change detection
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; de; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6