RequestPolicy is an extension for Mozilla browsers that improves the privacy and security of your browsing by giving you control over when cross-site requests are allowed by webpages you visit. It is the first comprehensive client-side protection against CSRF attacks and the first tool to enable the use of modern browsers without cross-site information leakage.
Improve the privacy of your browsing by not letting other sites know your browsing habits. Secure yourself from Cross-Site Request Forgery (CSRF), Clickjacking, and other attacks. More Info »
Cross-site requests are requests that your browser is told to make by a website you are visiting to a completely different website. Though usually legitimate requests, they often result in advertising companies and other websites knowing your browsing habits, including specific pages you view throughout the day. Among the attacks that cross-site requests are used in, they are particularly dangerous with Cross-Site Request Forgery (CSRF) attacks where your browser is told to make a request to another website and that other website thinks you (the person) meant to make the request.
With RequestPolicy, the default for any cross-site request is to deny it. Users are notified when requests on the current page have been blocked (the status bar flag icon at the bottom right of your browser turns red). Clicking on this status bar flag icon gives you a menu where you can view and modify which requests are blocked and allowed. You can whitelist requests you approve of by origin site, destination site, or specific origin-to-destination.
RequestPolicy is compatible with Firefox 3+, SeaMonkey 2.0, Flock 2.0, Songbird 1.0, and Fennec 1.0. It works wherever these browsers do (Linux, BSD, Mac, Windows, etc.).
Link to official RequestPolicy site
Official Website
Features
No features added
Add a feature
Categories
Security & Privacy Web Browsers
Tags
analytics browser-extension browsing-security clickjacking cross-site-requests csrf privacy-protection script-block xss
RequestPolicy was added by ruka_m in
Mar 2011 and the latest update was made in
Aug 2018. The list of alternatives was updated May 2018 There is a history of all activites on
RequestPolicy in our Activity Log.
It's possible to update the information on RequestPolicy or report it as discontinued, duplicated or spam.
