NoScript

NoScript

Maximum protection for your browser: NoScript allows active content only for trusted domains of your choice to prevent exploitation.

NoScript promo image
What is NoScript?

NoScript is a powerful Chrome extension designed for maximum web protection. It works by allowing JavaScript, Flash, Java, and other executable content to run only from trusted domains, such as your home-banking site. This technique mitigates the risk of remotely exploitable vulnerabilities like Spectre and Meltdown. It offers a solid defense against cross-site scripting attacks (XSS), cross-zone DNS rebinding, CSRF attacks (router hacking), and Clickjacking attempts. This preemptive approach helps prevent exploitation of even unknown security vulnerabilities without causing any loss of functionality where you need it. Considered the best available protection on the web, NoScript has won the 'PC World World Class Award' and is bundled with the Tor Browser.

Merlin
Stats
Stats date:
Version: 11.4.18 (Last updated: 2023-03-04)
Creation date: 2020-06-22
Manifest version: 2
Permissions:
  • contextMenus
  • storage
  • tabs
  • unlimitedStorage
  • webNavigation
  • webRequest
  • webRequestBlocking
  • <all_urls>
Size: 933.89K
Email: Click to see
Risk impact: High risk impact
Risk likelihood: Low risk likelihood

Other platforms

NoScript Security Suite
NoScript Security Suite (v11.4.28)
4.40 (2,147) 314,489
Not available on Edge
Merlin
Summary
Analyze keywords

NoScript 11.x: finally a cross-browser NoScript for Chrome, Chromium and Firefox-based web clients. Please report any issue at https://noscript.net/forum in the Support section with [Chrome] in the subject. For the more technical inclined, bug reports and/or contributions at https://github.com/hackademix/noscript/ (source code repository).

Privacy policy (TLTR: zero data collected): https://addons.mozilla.org/en-US/firefox/addon/noscript/privacy/

Winner of the "PC World World Class Award" and bundled with the Tor Browser, NoScript gives you with the best available protection on the web.

It allows JavaScript, Flash, Java and other executable content to run only from trusted domains of your choice, e.g. your home-banking site, mitigating remotely exploitable vulnerabilities including Spectre and Meltdown.

It protects your "trust boundaries" against cross-site scripting attacks (XSS), cross-zone DNS rebinding / CSRF attacks (router hacking), and Clickjacking attempts.

Such a preemptive approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality where you need it. Experts do agree: your browser is really safer with NoScript ;-)

See more
User reviews
User reviews summary
These summaries are automatically generated weekly using AI based on recent user reviews. Chrome Web Store does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.
Pros
  • Offers control over each website's scripts
  • Improves website load times by blocking trackers
  • Helpful for blocking unwanted scripts and invasive ads
Cons
  • Often breaks website functionality, requiring manual whitelisting
  • Issues with saving 'trusted' settings
  • Difficult to use for beginners, with unclear guidance on what to trust
Most mentioned
  • Website functionality issues
  • Requires manual intervention for optimal use
  • Control over scripts
View all user reviews
Safety
Risk impact

NoScript is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this extension. Review carefully before installing. We recommend that you only install NoScript if you trust the publisher.

Risk likelihood

NoScript has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details
Screenshots
Promo images
NoScript small promo image
Small promo image
Similar extensions

Here are some Chrome extensions that are similar to NoScript: