Maone is particularly pleased with a change to NoScript's Application Boundaries Enforcer (ABE) module, designed to guard against router attack. The new module protects against a new form of DNS rebinding attack that was able to bypass the old module.
"NoScript 2.0 is out, and among other things, saves your router's ass even if it's so flawed to expose its UI on the LAN with its WAN IP :P," Maone tweeted this week.
The module now detects your public WAN IP by sending an anonymous query on a secure channel and treats this IP as a local address when enforcing policies against cross-site request forgery (CSRF) and DNS Rebinding, common ways in which malicious sites hack into routers.
Version 2.0 also includes several bug fixes and the ability to better handle multiple permissions on the same page. NoScript blocks script and plug-in content on all sites you haven't whitelisted.