| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
Removing an edge
Removing an edge
Posted Mar 24, 2005 18:37 UTC (Thu) by pm101 (subscriber, #3011)Parent article: GreaseMonkey: a two-edged sword
I think the problem is fixable. The trick would be to install scripts with appropriate permissions. One that can modify slashdot.org should only be allowed to modify pages on slashdot.org, and not on paypal.com or bankofamerica.com. You risk having a slashdot account stolen, but not much more. Secure sites remain secure.
Skimming the web page, it looks like it already has that functionality in place, although it's not clear from the documentation whether it is secure-by-default or insecure-by-default.
(Log in to post comments)
Removing an edge
Posted Mar 31, 2005 9:37 UTC (Thu) by alextingle (subscriber, #20593) [Link]
Or just disable it completely for https:// pages.