NoScript
Maximum protection for your browser: NoScript allows active content only for trusted domains of your choice to prevent exploitation.
What is NoScript?
Stats
Chrome-Stats Rank
Summary
Winner of the "PC World World Class Award" and bundled with the Tor Browser, NoScript gives you with the best available protection on the web.
It allows JavaScript, Flash, Java and other executable content to run only from trusted domains of your choice, e.g. your home-banking site, mitigating remotely exploitable vulnerabilities including Spectre and Meltdown.
It protects your "trust boundaries" against cross-site scripting attacks (XSS), cross-zone DNS rebinding / CSRF attacks (router hacking), and Clickjacking attempts.
Such a preemptive approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality where you need it. Experts do agree: your browser is really safer with NoScript ;-)
User reviews
Safety
Risk impact
NoScript is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this add-on. Review carefully before installing. We recommend that you only install NoScript if you trust the publisher.
Risk likelihood
NoScript has earned a fairly good reputation and likely can be trusted.