---
id: 4273
title: "NoScript Bypass"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/noscript-bypass-advisory"
published_at: "2015-07-06T00:00:00Z"
tags: ["browser-security", "firefox", "advisory", "noscript", "whitelist", "domain-registration"]
phying_url: "https://phying.com/item/4273"
lang: en
---

# NoScript Bypass

## Summary

Bishop Fox advisory: the expired domain vjs.zendcdn.net remained on NoScript's default whitelist, so re-registering it let attackers run JavaScript despite the add-on in versions before 2.6.9.27.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2015-07-06T00:00:00Z
- **Original:** https://bishopfox.com/blog/noscript-bypass-advisory
- **Phying News:** https://phying.com/item/4273