{"issue":{"user":{"id":1240282,"login":"jsamuel","url":"https://api.github.com/users/jsamuel","gravatar_id":"bc1d195cedb959a3946572b08ce9e7c7","avatar_url":"https://secure.gravatar.com/avatar/bc1d195cedb959a3946572b08ce9e7c7?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"title":"GUI does not show all blocked requests","milestone":null,"created_at":"2011-12-22T18:56:42Z","labels":[{"name":"extension","url":"https://api.github.com/repos/RequestPolicy/requestpolicy/labels/extension","color":"ededed"}],"state":"open","updated_at":"2011-12-22T18:56:42Z","id":2640485,"html_url":"https://github.com/RequestPolicy/requestpolicy/issues/156","pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"closed_at":null,"body":"    imported trac ticket\n    created: 2011-01-16 21:13:31\n    reporter: eibwen\n\nFrom what I recall of the source, the GUI lists of (blocked?) cross-site requests are guessed from the source of the page (eg src attributes); however, other requests are also possible.\r\n\r\nFor example, a greasemonkey userscript to parse a page and redirect to another domain will silently fail.  The cause turned out to be that this was considered a cross-site request and shouldLoad() blocked, but there was no GUI indication.\r\n\r\nAfter manually adding the domain as an allowed cross-site request, all worked as expected.  Nevertheless, this behavior is particularly counter-intuitive and the list of blocked requests is incomplete...","number":156,"url":"https://api.github.com/repos/RequestPolicy/requestpolicy/issues/156","comments":0,"assignee":null},"action":"opened"}