NoScript: the Best Firefox Add-on

NoScript Security Suite is a Firefox extension which makes your browser much more secure. This add-on allows plugins such as Java, JavaScript, Flash, etc. to be executed only by domains you have marked as trusted.

It also features anti-XSS (cross-site scripting) protection to prevent malicious code being injected from one site to another (for example, a hacker's site might try to get your online bank account data using an XSS attack). Furthermore, it prevents clickjacking, blocks frames and iframes from untrusted domains, and more. I think NoScript is truly the best Firefox plugin ever created!

• NoScript is absolutely free, open-source software.
• NoScript makes your browser much more secure by protecting you against malicious scripts and providing Application Boundaries Enforcer (ABE) security.
• NoScript is the only Firefox extension that fully protects you against most XSS attacks.
• NoScript is very easy to use, both for an expert and a newbie.
• NoScript blocks most annoying ads by preventing any plugins or scripts being loaded by domains not in your whitelist.

Share your opinion in the ongoing debate below.

If you have just installed NoScript for the first time, it might be a bit confusing for you. Sites that you visit every day might look weird or not work properly at all. Don't worry - all you need to do is to add them to NoScript's whitelist (that's what the list of trusted sites is called) and it will remember your choice from then on. In order to allow certain domains to execute scripts and use plugins, all you have to do is to click the little "S" icon in the bottom right corner of your screen and choose "Allow [domain.com]".

Note: in some cases you will have to allow several domains for the site to work properly. For example, paypal.com also needs paypalobjects.com to be set on "Allow".

It all might seem like too much at first, but I'm sure you will start appreciating the additional security that NoScript provides eventually. Usually it only takes a few days to "train" your NoScript by allowing the domains you visit the most. After that you will only have to use the "Allow" button for new sites (and a lot of them do not need scripts to work, anyway!).

One very cool side effect of NoScript is that by disallowing scripts, plugins and iframes from non-whitelisted domains it also blocks ads. You won't be seeing most online advertisements unless you specifically allow domains such as doubleclick.net, adbrite.com, googlesyndication.com and so on. I say it's a "side effect" since NoScript wasn't made to be an ad blocking plugin - but it does the job just fine.

It might also come in handy for people who are using mobile internet and want to save as much bandwidth as possible. By blocking "heavy" Flash ads and videos, it can cut your bandwidth usage in half or even more.

To find out more or to download this add-on, just visit the official website at NoScript.net. They have a very detailed and helpful FAQ, and a support forum.