non-local scripts in chrome

[Alex Fritze]

Hi,

if I include some non-locally stored js into a chrome file,

<script src="http://www.myserver.com/script.js" />

then the script gets full chrome privileges. Is this a bug? Shouldn't the
script be restricted depending on where it came from?

Thanks
alex