Indeed! Thanks for restating my muddy prose; by "ecosystem" I do mean the Firefox+extensions community.Thrawn wrote: Containment of *addons* is futile, yes, but don't confuse that with containment of web pages. The power of addons means that they can indeed effectively contain web pages.
Together we indeed have the firepower to match and better those who would like to control users of the Web, but only because Mozilla allows us such power. Do note that Ggle continues to keep Chrome tied down from extension by NS, for example. It allows trivial JS extensibility, but appears to want to maintain much more control over runtime than Mozilla. I wonder sometimes whether this is for security or control reasons, but that's a bit of a side issue here.
Oh, I think that Security Policies are the obverse of this - in that NS (and all extensions) continues to be able to extend Firefox so powerfully. No matter whether NS is incorporated in standard releases, the fact that it is still allowed such control of the innards is a tribute to genius oversight of scripting etc by Maone - and others on the security development group.I wish he were! Mozilla doesn't seem to be paying all that much attention to what NoScript is doing. Apart from click-to-play, I guess, and I don't know whether that was inspired by NoScript or by FlashBlock.
Anyway, you may remember when Mozilla did pay attention to Maone - the stupid spat between NS and ABP was a great public display of the power of the extension ecosystem.... and its resolution via the goodwill of the NS master - without significantly removing the extensibility of Firefox - was a great display of the goodwill that our community needs for its survival.
Just emphasising the point that the OP will never have certainty over scripting while their browser incorporates any runtime monkeying ------ and that Firefox is the ideal way for both scripting and maximum possible security to coexist.