Haketilo

fix SVG script blocking

remove unneeded import in policy_enforcing.js

force tags

prevent injected scripts from executing out of order

add more tests for CORS bypassing feature

allow injected scripts to bypass CORS using provided API

prepare for exposing APIs to injected scripts

serialize and deserialize entire Response object when relaying fetch() calls to other contexts using sendMessage

improvement to also properly sanitize intrinsics in XML documents under older browsers (IceCat 60)

improve script blocking in non-HTML documents (XML)