What's

Download

Forum NSA - NoScript Anywhere NoScript Mobile Multiprocessing / Android Porting Project

Dec 2017, IMPORTANT: NoScript 10 "Quantum" on Android!

On Firefox 57 and above there's only one NoScript, i.e. NoScript 10 "Quantum" which you can download here.

NSA is now considered a "legacy" add-on, just like NoScript 5.x "Classic" on desktop, but now NoScript is in an even better position than before on Android, because of the finally unified code-base ensuring the same support level both on desktop and mobile devices :)

This website will be kept for its historical archive value.

What's

NoScript Anywhere (NSA) is the nickname for the next major iteration of the NoScript security add-on (NoScript 3.x), whose guts have been turned upside down in order to match Mozilla's Electrolysis multiprocessing architecture and implement a porting for Firefox Mobile, available on Android smartphones and tablets.

This open source (GPL) effort has started in the very beginning of 2011, and has been partially funded by the NLnet Foundation.

NoScript 3 alpha, available on Firefox 4 Mobile for the Android and Maemo operating systems, offers all the the major security features of "classic" NoScript:

* Fully implemented on the first NSA (Firefox 4 Mobile); recent (2012) subfeatures and the warnning dialog still need to be ported in NSA++ (Android-native Firefox).

** Fully implemented on the first NSA (Firefox 4 Mobile); partially working on NSA++ (Android-native Firefox) but needs bug fixing, testing and the Sync functionality to be restored for being usable beyond the basic default LAN protection (which already works).

NoScript 3.x's UI is greatly simplified and optimized for touch devices, featuring a brand new page permission editing UI, specifically redesigned for smartphone usage and easily accessible by tapping on a floating finger-friendly icon.

Once installed (with no need to restart the browser), it blocks every script and other potentially dangerous active content unless the loading resource is whitelisted.

NoScript 3.x also introduces convenient Permissions Presets, which are offered for choice on first run and can be switched at any time:

Easy Blacklist (you pick untrusted sites where JavaScript and plugins must be blocked)

(you pick untrusted sites where JavaScript and plugins must be blocked) Click To Play (plugins are blocked until you click)

(plugins are blocked until you click) Classic Whitelist (you pick trusted sites where JavaScript and plugins can run)

(you pick trusted sites where JavaScript and plugins can run) Full Protection (like "Classic Whitelist", but all the embedded content is blocked until you click, even on trusted sites)

NSA++, the new Android Native NoScript porting In late 2011, Mozilla abandoned the Electrolysis/XUL architecture of its mobile Firefox and rebuilt it as a Gecko renderer embedded inside a native Android application, achieving a huge performance and responsiveness boost.

Unfortunately, this change made the original NSA incompatible almost overnight, and required yet another massive NoScript rewrite to bring it back on mobile devices.

This effort is still ongoing, but experimental 3.5 alpha builds compatible with the Android Native Firefox can be downloaded here for testing purposes, even if they're not as complete as the legacy (Firefox 4 Mobile) version.

At this moment:

Script blocking and the XSS filter are fully functional.

ClearClick and ABE are partially working but have no UI yet (they do silently block "tapjacking" attempts and cross-zone CSRF respectively, though).

Remote synchronization (Sync) is still completely missing, but is a priority as well.

The long-term goal is to reach feature parity with the stable desktop version and replace it with NSA's more modern, clean and future-proof (e.g. multiprocessing-aware) code. Unfortunately the need to keep "traditional" NoScript 2.x up-to-date for its millions of users makes this process painful and slow, especially because the project's current financial resources can fairly support the active development of one single codebase, but are insufficient for two divergent ones to be kept in sync. Therefore Donations, sponsorships, partnerships, grants and other funding proposals to keep NoScript really Anywhere are extremely welcome!

Downloads