Ticket #144 (new enhancement)

Opened 3 months ago

Last modified 3 months ago

Greasemonkey installation window should show the source URL

Reported by: oq9pscb..@sneakemail.com Assigned to:
Priority: major Milestone:
Version: Keywords: security, installation
Cc:

Description

You should only install scripts from sources that you trust. Unfortunately, the Greasemonkey installation window does not show the source URL of the script to be installed. It is often possible to cancel and to go back and check the link target. But in other cases the link is not obvious, such as for the common JavaScript?-operated links or automatic updates triggered by a Greasemonkey script itself (e.g. the MediaWiki? editor wikEd).

Therefore, I suggest to always show the full installation URL in the installation popup.

Attachments

Change History

(follow-up: ↓ 2 ) 06/27/08 16:30:00 changed by aranti..@gmail.com

Ultimately the "source" is the website you were on when you clicked the link. If you trust the site, then you trust what they're linking to. But you do have a point.

(in reply to: ↑ 1 ) 06/27/08 17:32:33 changed by anonymous

Replying to aranti..@gmail.com:

Ultimately the "source" is the website you were on when you clicked the link. If you trust the site, then you trust what they're linking to. But you do have a point.

Hi Arantius. The installation link can link everywhere on the web, more often the script resides on a different site. It is that site I should trust, not the link site.


Add/Change #144 (Greasemonkey installation window should show the source URL)