noXSS 0.1.1 (2008-11-23)

  • Using original URI for script file injection detection (#34)
  • Script file injection must match at least //hostname
  • Basic frame handling (Does not catch all cases yet)
  • Skipping redunant scanning of functions (except event handlers)
  • Reduction of the default minScriptMatch to 6 characters
  • Tracker will be disabled when noXSS has been deactivated
  • Sharing of runtime between tokenizer instances
  • Freeing runtime and context on module shutdown (#32)
  • Stripping binary components in XPIs (saves space)
  • Partial universal binary support

noXSS 0.1 (2008-10-05)

  • Initial public release