https://bugzilla.wikimedia.org/show_bug.cgi?id=26508
Bawolff <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #1 from Bawolff <[email protected]> 2011-01-02 10:06:20 UTC --- Blocking JS url's would break stuff, if not in core, definitely in userscripts. Well it'd be nice if we didn't use html event handler attributes, many extensions still do (many extensions also probably use eval). Most of this stuff probably wouldn't be too useful, but some of it possibly might. Restricting what places the scripts can come from might be interesting (easy way to stop naive admins from including scripts from third parties). But one would have to be careful not to break things. People include scripts from other wikimedia projects and so on. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
