Hacker News new | ask | show | jobs
by amelius 2567 days ago
What would happen if browsers simply didn't allow cross domain referencing? Would the web break (and would it be worse than NoScript)?
1 comments
laughinghan 2567 days ago
I've thought about this before, since NoScript is too disruptive for me. One issue is that it's common for scripts to served from assets.whateverwebsite.com. I also thought of allowing anything from the same second-level domain (so anything on .whateverwebsite.com), but that would allow anything on .co.uk. ¯\_(ツ)_/¯ in Chrome I trust, for now.
link
naniwaduni 2566 days ago
Sounds like a job for the public suffix list.
link
laughinghan 2566 days ago
Ooh, cool, hadn't heard of that before! TIL.

But even with the added complexity of regularly pulling in the public suffix list, the problems keep going: e.g., facebook.com's scripts are all served from static.xx.fbcdn.net.

link