search

hackademix / noscript

The popular NoScript Security Suite browser extension.
https://noscript.net/
GNU General Public License v3.0
844 stars 90 forks source link

Firefox Stack Protection does not work with NoScript correctly #335

Open ghost opened 8 months ago

ghost commented 8 months ago

If Firefox Security Sandbox Content Shadow Stack is enabled in about:config, then NoScript misbehaves. For example, NordVPN app for Windows uses default browser to login and if both NoScript and Stack protection are enabled, then NordVPN login page in Firefox stalls forever and none of the extensions allow access to their settings.

I do not know exactly what is going on, but the variable affecting this behavior is coupling of Stack protection enablement and NoScript enablement. Stack protection is experimental in Firefox (for now). It is enabled system-wide on Windows 11 machine I test.

ghost commented 8 months ago

Further testing shows that other extensions, such as uBlock Origin also do not work when stack protection is enabled in Firefox.