-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2010-3219 2010-03-02 00:29:53 --------------------------------------------------------------------------------
Name : mozilla-noscript Product : Fedora 11 Version : 1.9.9.50 Release : 1.fc11 URL : http://noscript.net/ Summary : JavaScript white list extension for Mozilla Firefox Description : The NoScript Firefox extension provides extra protection for Firefox. It allows JavaScript, Java, Flash and other plug-ins to be executed only by trusted web sites of your choice (e.g. your online bank) and additionally provides Anti-XSS protection. -------------------------------------------------------------------------------- Update Information: Changes since 1.9.9.45: [+] new feature, [x] bug fix, [-] removed feature, [=] repackaging or cosmetic change v 1.9.9.50 ================================================================= + Updated ABE grammar to use new AddressMatcher syntactic sugar + Alert about ABE syntax errors when option dialog gets focused after a ruleset editing (thanks al_9x for suggestion) v 1.9.9.49 ================================================================= + .x.y AddressMatcher syntactic sugar, matching both x.y and *.x.y (thanks al_9x for suggestion) + InjectionChecker speed and accuracy improvements x Fixed top- level site not being correctly positioned and highlighted in permissions menu sometimes (thanks nagan for report) x Fixed post-XSS "Unsafe reload" not working properly sometimes v 1.9.9.48 ================================================================= x Fixed a second level InjectionChecker bypass, requiring an open redirect which accepts and uses unfiltered data: URIs. Responsible disclosure by the SecuriTeam Secure Disclosure (SSD) project x Fixed reload on permission change being triggered on the nearest 10 tabs only x Fixed permanent address entry being added to the whitelist if domain is already allowed upon bookmarklet execution (thanks Bobabo for report) x Better UI behavior for URLs with non- standard ports (thanks al_9x for report) x Updated nb-NO localization v 1.9.9.47 ================================================================= x Fixed XSS checks skipped on some reloads (thanks Alejandro Rusell for report) x Improved content placeholder management x Mobile version bump v 1.9.9.46 ================================================================= x Fixed uneeded tab reload issue related to untrusted subdomains (thanks al_9x for reporting) x Optimized reload checks for the "hundreds of tabs" case, in order to prevent UI locking x Improved XSS checks on file uploads, should not hang even on gigabytes x Trunk compatibility version bump -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update mozilla-noscript' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
