4 ms·
I’d take a step further and say maybe origin only JavaScript should be a thing. If I go to example.com I don’t want JavaScript from other hosts loading and run
by aaomidi 3y ago
I’d take a step further and say maybe origin only JavaScript should be a thing.
If I go to example.com I don’t want JavaScript from other hosts loading and running. This could probably be a simple browser extension honestly - might give it a try. It’ll break a good chunk of sites but I don’t think it’d break them too much?
Although it does completely break CDNs so probably an allow list would be necessary.
- paulryanrogers 3y agoIt would break countless, useful, embeddable widgets. Or at least until site owners become savvy enough to proxy it or put it on a subdomain.
- hn92726819 3y agoThis is what uBlocm Origin advanced mode does, but obviously it isn't default. Though, I really don't like this propisition because it just means google will require websites to host google-provided JavaScript from their domain.