diff --git a/4.1-Extensions.md b/4.1-Extensions.md index 9af3829..75bb564 100644 --- a/4.1-Extensions.md +++ b/4.1-Extensions.md @@ -56,18 +56,10 @@ These extensions will not mask or alter any data sent or received, but may be us * Not an extension, but an excellent tool to compare user.js files and output the diffs in detailed breakdown - by our very own incomparable [claustromaniac](https://github.com/claustromaniac) :cat2: ### :small_orange_diamond: Don't Bother... +* NoScript + * :exclamation: **CSP**: "NoScript uses some trickery to ensure its CSP headers are injected" [gorhill](https://bugzilla.mozilla.org/show_bug.cgi?id=1462989#c20) + * NoScript will cause all other extensions to silently fail when they use CSP header injection * Ghostery, Disconnect, Privacy Badger * They add nothing uBlock Origin doesn't already cover * Chameleon, Privacy Possum or any other extension that raises entropy * We support *lowering* entropy. UA spoofing is best left to *privacy.resistFingerprinting* - ---- - -### :small_orange_diamond: Legacy Extensions - -* NoScript 5.x ✔ [Privacy](https://addons.mozilla.org/firefox/addon/noscript/privacy/) - * Yes, there is a FF57+ non-legacy version. For FF57+, use uMatrix in some hardened configuration instead. This *may* not be a total replacement, as NoScript *might* offer some unique protections debatable: eg: ClearClick, ABE [see here](https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.2.3-uMatrix), XSS really debatable -* Greasemonkey 3.x | [GitHub](https://github.com/greasemonkey/greasemonkey) - * Yes there is a FF57+ non-legacy version. We recommend Violentmonkey. -* SSleuth | [GitHub](https://github.com/sibiantony/ssleuth) | [Extension Info](https://github.com/sibiantony/ssleuth/issues/78#issuecomment-320638840) & [1322748](https://bugzilla.mozilla.org/show_bug.cgi?id=1322748) - * Visual urlbar color/rating and one-click information on ciphers, PFS, SSL/TLS and CAs