RequestPolicy/requestpolicy — Issue #67: Allow whitelisting of elemetns in <head></head>
Author: jsamuel
Created: 2011-12-22 03:57:01+00:00
State: open
Labels: extension

As it is currently done, most CDNs, and many design best practices (hosting script and images on a non cookie server) are broken by the requirement that everything come from the same domain.

I don't visit sites that I think would put malicious script in their headers (and if I do, I use a totally locked down version of Opera), so I am mainly concerned with what is being added to the page by users.