Feature Request allow/block scripts based on origin
Posted: Wed Sep 15, 2010 8:01 pm
I know this can probably be done by editing ABE rules, but more complicated and would probably require constant editing instead of using the status icon menu. Some sites use scripts from themselves, and some sites use scripts from other locations. Currently you can only allow/block scripts based on where it is from, but now what site is using it. If mysite.com has scripts from google.com, then Allow google.com not only affects mysite.com, but also allows it for othersite.com.
What I would like to be able to do is to allow or disallow based not only on the location but on who is using it. I'd like to for instance allow scripts from google.com for google pages, but for other pages that may include scripts from google.com, still block unless I want to temporarily allow in the status icon menu as it currently does.
If a rules system were used for white lists/black lists, it could look like this:
From *.google.com for *.google.com allow all (allow scripts, objects, java, etc from google.com as long as it is for a google.com page)
From *.youtube.com for * allow (scripts, objects) (allow scripts and objects from youtube.com for any page)
The tray icon could have some additional entries:
Allow google.com
Allow google.com for google.com
Temporarily allow google.com
Temporarily allow google.com for google.com
Maybe another idea is to base the default rule on the ABE entries, and then if no result is available, result to the whitelist/untrusted/etc settings:
Site google.com
Accept all from google.com
When visiting a google.com site, this would default to allowing scripts from google.com. When visiting another site that uses google.com, it would fall back to other settings and allow it to be temporarily allowed in the status icon menu.
Just an idea.
What I would like to be able to do is to allow or disallow based not only on the location but on who is using it. I'd like to for instance allow scripts from google.com for google pages, but for other pages that may include scripts from google.com, still block unless I want to temporarily allow in the status icon menu as it currently does.
If a rules system were used for white lists/black lists, it could look like this:
From *.google.com for *.google.com allow all (allow scripts, objects, java, etc from google.com as long as it is for a google.com page)
From *.youtube.com for * allow (scripts, objects) (allow scripts and objects from youtube.com for any page)
The tray icon could have some additional entries:
Allow google.com
Allow google.com for google.com
Temporarily allow google.com
Temporarily allow google.com for google.com
Maybe another idea is to base the default rule on the ABE entries, and then if no result is available, result to the whitelist/untrusted/etc settings:
Site google.com
Accept all from google.com
When visiting a google.com site, this would default to allowing scripts from google.com. When visiting another site that uses google.com, it would fall back to other settings and allow it to be temporarily allowed in the status icon menu.
Just an idea.