George Maone, an Italian security researcher who developed NoScript, a security additional component for Firefox, published the latest NoScript 1.8.2.1 last week, adding the Clickjacking protection function.
In November September this year, WhiteHat Security interserdrosman and SecTheory Robert Hansen revealed that all browsers may be affected by the Clickjacking vulnerability. They said they had discussed the vulnerability with Microsoft, Mozilla, apple, and Adobe. Adobe, however, confirmed last week that the Flash Player affected by the browser vulnerability, will allow hackers to access users' microphones and cameras. Apart from providing temporary remedial solutions, Adobe, it also promises to fix the vulnerability by the end of October.
According to Maone of the NoScript Security plug-ins in the developed Firefox browser, because this Clickjacking vulnerability comes from HTML design that allows websites to embed IFRAME content from other webpages, all browsers are spared.
Maone said that NoScript 1.8.2.1 has a new ClearClick function. When a user interacts with the webpage through a mouse or keyboard or clicks the buttons on the webpage, if these buttons or interactive components hide content from other web pages or the information is not transparent enough, a warning will be raised and the original information will be exposed. Users can use this anti-blocking browser kidnapping attack.
Currently, NoScript only supports Firefox, While IE and other browsers do not.