Page 1 of 1

Re: Allow blocking of web bugs on trusted pages

Posted: Wed May 06, 2009 2:23 pm
by Giorgio Maone
It's quite pointless, since once scripting is enabled there are several ways to "phone back home" (<OBJECT>,<SCRIPT>,<EMBED>,<LINK>,<VIDEO>,<AUDIO> and I may miss some) other than plain old <IMG> and you can tell for sure if it's a web bug or not before the repsonse comes back (then it's too late).
That's why Ghostery alerts you about web bugs, but cannot block them: they're unblockable, unless you impose some draconian cross-request policies which may break a lot of things.
The Request Policy could be mean to implement them, and the soon to be released ABE could be another.