NoScript 11.0.4rc2

x Recursive webgl context monkeypatching across same origin
  windows (thanks skriptimaahinen for concept and patch)
x Replaced cookie-based hacks with synchronous messaging
  (currently shimmed) to retrieve fallback and
  per-tab restriction policies
x Work-around for Chromium not supporting frameAncestors
  in webRequest
x Block CSP violation reports requests synchronously, before 
   they fail on .invalid DNS resolution, on Chromium

NoScript 11.0.4rc1

x [L10n] Updated Transifex-managed da, it, nl, ru, sv_SE
x [XSS] Updated HTML5 events
x Updated TLDs
x Fixed "Cascade top document restrictions" option not always
  applied to embedded elements (thanks barbaz for reporting)
x Removed XSS prompt for timeouts

NoScript 11.0.3

x [Tor] Work-around for prompts being huge when
  resistFingerprinting is enabled
x [XSS] Fixed false positives due to overzealous HTML
  attribute checking
x [XSS] Enabled InjectionChecker logging when debugging mode
  is on
x Work-around for browser.i18n.getMessage() API in content
  scripts giving away browser's real locale (Tor issue #31287)
x Updated TLDs
x [L10n] Updated Transifex-managed he, is, nb, ru, sq, zh_TW

NoScript 11.0.3rc3

x Updated TLDs
x [L10n] Updated Transifex-managed he, is, nb, ru, sq, zh_TW

NoScript 11.0.3rc2

x [Tor] Work-around for prompts being huge when
  resistFingerprinting is enabled
x [XSS] Fixed false positives due to overzealous HTML
  attribute checking
x [XSS] Enabled InjectionChecker logging when debugging mode
  is on

NoScript 11.0.3rc1

x Updated TLDs
x Work-around for browser.i18n.getMessage() API in content
  scripts giving away browser's real locale (Tor issue #31287)

NoScript 11.0.2

+ Restored "classic" pasted HTML sanitization feature, Now
  triggered by drag'n'drop too (thanks barbaz for patch)
x Fixed bug in browser type detection by content scripts (
  thanks barbaz)
+ Added "Collapse blocked objects" option in Blocked Objects
  prompt
x Fixed corner case when application/* content types should
  match "media" rather than "object" (thanks skriptimaahinen
  for reporting)
x Replacement clicks are now intercepted even if a content
  placeholder is obstructed by an overlay
x More graceful handling of chrome: origins (thanks
  skriptimaahinen for reporting)
x CSP building optimizations
x Updated TLDs.
x [L10n] Updated Transifex-managed locales br, de, it, ms,
  nl, ru, tr, nb, sv_SE and zh_CN

NoScript 11.0.2rc2

x Updated TLDs.
x [L10n] Updated Transifex-managed locales br, de, it, ms,
  nl, ru, tr
x Fixed bug in browser type detection by content scripts (
  thanks barbaz)
x Fixed paste sanitization bugs and make it work on drag and
  drop too (thanks barbaz)

NoScript 11.0.2rc1

+ Restored "classic" pasted HTML sanitization feature (thanks
  barbaz for patch)
+ Added "Collapse blocked objects" option in Blocked Objects
  prompt
x Fixed corner case when application/* content types should
  match "media" rather than "object" (thanks skriptimaahinen
  for reporting)
x Replacement clicks are now intercepted even if a content
  placeholder is obstructed by an overlay
x More graceful handling of chrome: origins (thanks
  skriptimaahinen for reporting)
x CSP building optimizations
x [L10n] Updated Transifex-managed nb, sv_SE and zh_CN
x Updated TLDs

NoScript 11.0

x [XSS] Fixed false positives with parameters named "src"
x Static click-to-play placeholders
+ [L10n] New da, is, pl, sq, zh_TW Transifex-managed locales
x [L10n] Updated sv_SE Transifex-managed locale