RequestPolicy/tractest — Issue #165: Predefined Policy "Sets" / "Groups"
Author: jsamuel
Created: 2011-12-22 02:44:02+00:00
State: open
Labels: extension

Often functionality provided by a site will require multiple sub-domains and/or domains to work. Frequently, these cross site requests are presented as a cascade, where an initial few generate further cross site requests, and so on and so forth. Some latter requests may even trigger javascript or similar, such that the origin appears to directly request from a 3rd party site.

In this scenario, it is particularly cumbersome to enable these requests, as you cannot merely allow a predefined request set, but rather are forced to allow each level of the cascade in sequence, refresh, and permit the next...

This is particularly frustrating when temporarily allowing, especially if either visited frequently or featured on multiple domains...

In the worst case, the user may get so frustrated, so as to temporarily allow all this page / globally; however, that often permits undesired requests as well (at least until the blacklist is supported).

At this time, I'd much rather see progress on regex allow/deny and the blacklist; however, this would still be a useful feature.

There may be other similar features from iptables that would be beneficial as well...