I tried setting up a default Window.open noAccess policy and then for certain sites I allowed it. The problem I ran into is that the allowed sites would change from https://www.somesite.com to https://newpage.somesite.com and then try opening a new window. The new window would not open because the site host name changed. I tried specifying the site name as https://*.somesite.com but that did not work. It would be nice to be able to specify a site URL that would cover all pages on a particular site without having to specify each one. _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
