[Greasemonkey] RE: GM_xmlhttpRequest: Anyway to tell what 'url' resolved to?

[Paul Bardo]

On 1/9/06, Aaron Boodman <zboogs at gmail.com> wrote:
> You could solve this for your installation of GM by modifying
> xmlhttprequester.js to include this value on the details object which
> is passed to event listeners.

OK, I did this, added the entire 'channel' property (had to make a
copy of it as GM didn't have permission to open it if I just passed
the referance).  Works perfectly for my needs.

I'm not too familiar with what this 'channel' property contains, but
some of the things like 'owner' and 'securityInfo' look like they
might have the potential to cause problems.  But others like URI,
originalURI, contentLength, and contentType look like they could be
very useful.

What are the downsides/security holes with adding this?  If there
aren't too many, is this something that could be considered for a
future release?  Maybe just the 'safe' parts?

Thoughts?