You're basically asking NoScript of fix/work-around Mozilla's bug 446344 , which is mostly a cosmetic one since adopting the whole CORS is much more reliable/robust than relying on the Origin header being sent for any request (and also maybe less privacy disputable). Answer is: maybe, I must consid...