Consider providing cross-domain XHR as an alternative to GM_xhr #181

Open
nmaier opened this Issue Sep 8, 2013 · 2 comments

Comments

Projects
None yet
2 participants
Member

nmaier commented Sep 8, 2013

Starting with Firefox24 IIRC, it will be possible to assign multiple origins (principals) to a sandbox. This would enable user scripts to define a set of hosts for cross-domain XHR (without the server having to implement CORS).

The add-on SDK already implemented this: https://addons.mozilla.org/en-US/developers/docs/sdk/Firefox-24/dev-guide/guides/content-scripts/cross-domain.html

It might be a good idea, for compatibility reasons, to allow something similar in Scriptish.

@erikvold Any thoughts about this?

Owner

erikvold commented May 1, 2014

+1 not sure if we should deprecated GM_xhr tho

erikvold added the FEATURE label May 1, 2014

erikvold added this to the v2.0 milestone May 1, 2014

Owner

erikvold commented May 1, 2014

@Domain is used to limit GM_xhr at the moment, it could be used to define the expanded principal too.

erikvold added the SECURITY label May 1, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment