Have been using this for awhile and was very happy with it. However, the latest version has continuous popups for suspicious cross-scripting. I have had to disable Sanitize cross-site suspicious requests in order to use FF at all.

The 'must have' Add-On.
P.S. to all who critizise the GUI: to use the new GUI is a bit different, but once understood it is as intuitive and fast to use as before. Really a great tool!

It's very simple : First when I was visiting some web sites, the CPU seemed to be suddenly panicking ! Now, I just active restrictions globaly for this site. Result: I get all the informations I needed without all this garbage of unwanted pubs !!! Thank's for that :-))

It's so good to security and even to ads! Thanks for this amazing tool!

This add-on just saved my account. I got a phishing e-mail that looked like it was legitimate, but the link pointed to a domain one letter off the original. The site didn't load properly because scripts were blocked on it. I knew I had scripts allowed for that domain. This helped me realize that the domain is not legitimate.

I initially installed this in my Firefox when there were many Javascript vulnerabilities, but these days it shows me that Facebook is trying to run a script with my on-line banking session at my credit union and at my trade union web site. NoScript allows me to mark that as "Untrusted," but these services still work fine without it; perhaps even better. NoScript lets me put that Facebook creep back in its place. Love it!

I give 4 stars but there is a glaring issue at work.
I have numerous computers and vm's that run NoScript. With Firefox sync enabled, they all keep completely losing their settings. This causes me to have to check off every single site over and over. I've tried the export/import, but that should not be necessary every time I enter a device that hasn't been used in a while. I don't know if this is a Firefox or NoScript issue, so I did not ding NoScript for that major issue.

Works great - the extra hassle of enabling scripts on a per domain basis is definitely worth it.

In order to limit the hassle though, I have a couple of suggestions:

1) Let us group permissions, and then allow and revoke those permission groups. As an example, I need to allow 2 out of 5 domains to use my bank, and when I'm done I want to revoke those permissions.

2) After importing huge block-lists, NoScript hangs for ages whenever I enter the settings - so maybe keep the lists of blocked and allowed domains separate from the other settings?

3) If I have marked a domain as untrusted, and later temporarily allow that domain, then, after revoking temporary permissions, the domain should be untrusted again, not default.

A little bit of work with the tuning but does wonder with the surf experience