Same origin policy solution

why don't browsers do something like this

if a site wants to do a request to a different domain with javascript, a message box pops up (like the one to allow it to use your camera), asking if you want to allow it to send requests to [site's name]

it would literally solve all problems with it
it would allow people to make much more powerful apps

Uriel Pereira frowns upon javascript.

"9001" on the display of my Troll Detector™. I'll answer anyway. If you ask the user to take a choice, the user will just click OK in order to get the popup out of the way.

I come back on /prog/ after 2 years, and nothing changed, nothing at all.