Default include broken
in
2 posts,
2 voices
Rebecca Mene...
User
  |
http://* is probably fine (for most sites), but https://* or indeed the default * is a really terrible idea, both for security reasons, and for reasons of confusing the user about whether a given site is actually secure. |
lazyttrick
Script's Author
  |
Importing requires *... This script doesn't use unsafeWindow... is there another way a malicious website could break in the Greasemonkey sandbox? |
