- Remove "fetch" capability from DEFAULT preset unless
"script" is there too (thanks Security Research Labs for
suggestion) - Block websocket connections where the fetch capability is
disabled (thanks Security Research Labs for report) - Improved origin normalization for sandboxed content
(thanks Security Research Labs for report)
Full changelog at https://noscript.net/changelog