[Greasemonkey] GM_xmlhttpRequest and localhost

Aaron Boodman zboogs at gmail.com
Tue Jul 19 05:07:45 EDT 2005


On a previous thread, it was pointed out that if GM_xmlhttpRequest is
not going to allow access to file:// then it should not allow access
to http://localhost either.

I'm not sure I agree. Lots of useful Greasemonkey scripts could be
written that access the private network, including localhost. Can
somebody expand more on why this is a concern?

-- 
Aaron


More information about the Greasemonkey mailing list