usercss icon indicating copy to clipboard operation
usercss copied to clipboard

User CSS should sanitize domain rules without HTTP protocol prefix

Open sirn opened this issue 14 years ago • 1 comments

Otherwise it would be unexpected by the user when they see their CSS being applied to all sites. Warning message in the manager would be nice, too.

Ideas:

  • Bare domain (e.g. google.com) applies to:
    • http://google.com/*
    • https://google.com/*
    • http://*.google.com/*
    • https://*.google.com/*
  • Subdomain (e.g. www.google.com) applies to:
    • http://www.google.com/*
    • https://www.google.com/*
  • Subdomain and path (e.g. www.google.com/search) applies to:
    • Also follow the above rule.
    • http://www.google.com/search
    • https://www.google.com/search

sirn avatar Jul 08 '10 19:07 sirn

I like this idea. Even if it isn't possible to work without needing the protocol at the beginning of the address, a warning message would be good.

ssaadh avatar Sep 15 '11 07:09 ssaadh