Hacker News Reader

This seems like a great step.

In the future, I hope to see browsers starting to help sites eliminate third-party scripts entirely. <script src="http://elsewhere/>; makes your site's security depend on that of "elsewhere", and allows "elsewhere" to do anything the logged-in user can do; changing the URL to https://elsewhere/ doesn't change that.

View on HN

There's no way Chrome will do this until Google can find a different way to insert AdSense ads on third-party sites. Currently, third-party scripts are the best way to achieve this. iframes are inelegant, and telling webmasters to update the script every once in a while just isn't going to work.

But I do hope that something like this becomes one of the standard add-ons that we can install. I'll have to go check if NoScript has a similar option...

What makes an iframe inelegant? It seems like the correct way to handle advertisements or other third-party content.

The browsers aren't going to be disallowing CDNs any time soon.

Reply on news.ycombinator.com