Hacker News new | ask | show | jobs
by samstave 2540 days ago
Websites I visit should not be allowed to make ANY fucking requests. FULL STOP.
3 comments

So web browsers are user agents, i.e. they act on your behalf. This is great because we can avoid heated arguments about what websites "should" or "shouldn't" be able to do as it's ultimately up to the user.

I assume you've already setup the relevant browser settings and extensions to enforce a user-defined CSP that blocks all further requests? If so, then great, your browser won't make any requests when you visit sites. And my browser will (apart from what I've blocked with other more selective extensions). We're both happy.

So, goodbye CDNs, AJAX, DNS load balancing, most websocket applications, third party image and script hosts, and so on?
Thats not what I am saying(or maybe it is): sites shouldnt be able to access OTHER machines on my network at all.
How do you load an image in a browser without making a request?