- I see that there is a closed request on the github issues for allowing extensions, i understand the reasons
- I see there is a closed resquest for adding a preconfigured block list, i agree with not having this.
- I see there is a closed request for overhauling the website permission model, the scope of the suggestions was understandably considered to large to realistically be implemented.
There may be others closed which i have missed
What i am trying to find out is is there any appetite for at least getting an open-no priority issue involving some kind of "improvement" (i get thats subjective) to the current javascript blocking implementation.
What I dont think has been suggested, which may be some type of middle ground is this:
The current behaviour:
- If /settings/site.settings/javascript.toggle is 'off' javascript is blocked for all sites, and can be enabled individually for each site required when the site is visited by clicking to the left of the address bar selecting permissions and sliding toogle, it works well.
- Alternatively permanent exceptions may be created in the setting/site.settings/javascript menu
- If /settings/site.settings/javascript.toggle is 'on' javascript is allowed for all sites but a block list can be added to the exceptions list
- Permissions either granted or applied through block/allow lists apply to the specific domain that has been visited or added to the list, any domains called by that domain whether subdomains or entirely seperate domains essentiallty inherit that permission.
Expected behaviour:
- Permissions are applied on a per domain basis and not inherited.
This means i can toggle the /settings/site.settings/javascript.toggle 'off', to block all connections, create a allow list that specifically lists only the domains i want to allow and know that when i visit a site that all the domains which may be called by scripts on that page do not automatically have the permission unless i have specified it in the allow list.
- This could still be overridden by using the permission/javascript toggle available when i visit individual webpages if i need all the scripts on a page to run.
- If the /settings/site.settings/javascript.toggle is 'on' i can add specific domains to the exclude list to block domains and trust that is they are called by a domain not specifically blocked that they will still be blocked.
Are these changes minor enough that they may warrent at least an open-no priority issue?