0NoScript的标志Improve your browsing security without crippling lots of sites

已发表 经过 & 根据 Web技术. 最近更新时间 .

I always recom­mend that people install an altern­at­ive browser to Inter­net Explorer. Per­son­ally I prefer 火狐 to the oth­er altern­at­ives (铬, 歌剧, 苹果浏览器) as I find the huge num­ber of addons on offer give it an unas­sail­able advant­age. I’ve recently exper­i­mented with the NoScript 加上, which enhances secur­ity by block­ing act­ive objects and scripts unless expli­citly approved. How­ever I found that I was forever hav­ing to grant per­mis­sion to every site I vis­ited for it to work correctly.


The main reas­on I wanted NoScript was to pre­vent XSS exploits, but I did­n’t want genu­ine loc­al scripts blocked. This can be achieved with NoScript by open­ing its options, tick­ing “tem­por­ar­ily allow top-level sites by default” and choos­ing “Base 2nd level Domains (noscript.net)”. This should sub­stan­tially reduce how fre­quently you need to grant a site permissions.

I’m sure some people will try to preach that this isn’t ‘prop­erly’ secure, but for most users if they have to choose between remov­ing NoScript, or hav­ing it in its default con­fig­ur­a­tion, the major­ity will choose to go without it. Using it in this con­fig­ur­a­tion will block XSS exploits and offer sig­ni­fic­antly improved secur­ity without much com­prom­ise to ease of browsing.

认为我们已经错过了什么? 让我们通过下面的评论知道. 如果您想订阅，请使用菜单上的订阅链接右上方. 您还可以通过使用下面的链接社会分享这与你的朋友. 干杯.

发表评论