NoScript Bypass
bishopfox.com | advisory | #browser-security | #firefox | #advisory | #noscript | #whitelist | #domain-registration
Summary
Bishop Fox advisory: the expired domain vjs.zendcdn.net remained on NoScript's default whitelist, so re-registering it let attackers run JavaScript despite the add-on in versions before 2.6.9.27.
- Published
- Collected
--- id: 4273 title: "NoScript Bypass" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/noscript-bypass-advisory" published_at: "2015-07-06T00:00:00Z" tags: ["browser-security", "firefox", "advisory", "noscript", "whitelist", "domain-registration"] phying_url: "https://phying.com/item/4273" lang: en --- # NoScript Bypass ## Summary Bishop Fox advisory: the expired domain vjs.zendcdn.net remained on NoScript's default whitelist, so re-registering it let attackers run JavaScript despite the add-on in versions before 2.6.9.27. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2015-07-06T00:00:00Z - **Original:** https://bishopfox.com/blog/noscript-bypass-advisory - **Phying News:** https://phying.com/item/4273