Consider providing cross-domain XHR as an alternative to GM_xhr #181

nmaier opened this Issue Sep 8, 2013 · 2 comments


None yet
2 participants

nmaier commented Sep 8, 2013

Starting with Firefox24 IIRC, it will be possible to assign multiple origins (principals) to a sandbox. This would enable user scripts to define a set of hosts for cross-domain XHR (without the server having to implement CORS).

The add-on SDK already implemented this:

It might be a good idea, for compatibility reasons, to allow something similar in Scriptish.

@erikvold Any thoughts about this?


erikvold commented May 1, 2014

+1 not sure if we should deprecated GM_xhr tho

erikvold added the FEATURE label May 1, 2014

erikvold added this to the v2.0 milestone May 1, 2014


erikvold commented May 1, 2014

@Domain is used to limit GM_xhr at the moment, it could be used to define the expanded principal too.

erikvold added the SECURITY label May 1, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment