RequestPolicy/requestpolicy — Issue #173: Option to allow (or temporarily allow) all redirects for a site (but not other cross site actions)
Author: jsamuel
Created: 2011-12-22 18:57:40+00:00
State: open
Labels: extension

imported trac ticket
created: 2011-02-04 02:20:31
reporter: stephen

This request is similar to
#53	add option to allow all redirects

However, I would like an option to allow a SITE to do redirects, but not allow any other cross site requests.

The use case is reading news on digg.com. I don't really want to allow digg to do any cross site on page stuff, but I would like to be able to click on any article to leave the site. Those clicks go through a tracking redirector and get caught by the plugin.

I would consider a using a global option to allow all redirects, but allowing on a site by site basis seems like it would get similar usability gains with more security.