indigoHatter
commented
5 years ago The not-fully-informed counter-argument to letting this happen, though, is that perhaps a malicious script could emulate clicking a link to an even more malicious website, and then you're hosed.
My counter-counter-argument though is if you've enabled a malicious script, it might have been too late to begin with.
by the way, this should be implemented after considering my idea for auto-temp-enabling same-site-scripts, because this behavior should be mimicked for this suggestion as well
Now, I'm not sure about the security aspects of this, but here's an idea. Some sites will link you off to other sites of different domains that can still likely be trusted. (For example, job search sites).
It would be fantastic if you could set (per-site, rather than globally) the ability to temporarily trust any scripts on any pages opened by clicking a link on that page.
So, using my example above, let's say I'm on Monster.com. I would like to click ScriptBlock and say "Temporarily enable scripts for clicked links in this site", so that when I find a job posting and click [Apply Here], and it opens a new tab to halliburton.com, the site will be automatically temporarily trusted, because I gave the parent tab permission to enable scripts to children.