Firefox: Do I really need NoScript?

hydraMax · 07-13-2010, 10:55 AM

I've used NoScript in the past. But I don't actually use it to block Javascript... too much of a nuisance to pick and choose which sites run Javascript. I only have for extra protection against XSS attacks.

But do I really need it? Does Firefox have its own built-in protections against XSS attacks? The reason I am thinking about it is because it seems like having another extension installed (NoScript) is in a way a security danger in and of itself.

mostlyharmless · 07-13-2010, 11:49 AM

Plenty of people surf without NoScript without bad things happening; guess it all depends on your other security layers, how paranoid you are, and what your browsing habits are...

unixfool · 07-13-2010, 12:40 PM

The only reason I use it is because it blocks javascript, unless I allow it. There are some things that even an attentive user will miss. If there's an embedded malicious javascript and you don't have something such as noscript to block it, you'll be in trouble (even if you may not know about it).

I've seen too many customers become infected via such scripts. Some are positively nasty. I play it safe by at least having noscript run interference for me.