Haketilo

support schema v2 and dependencies on mappings

add more tests for CORS bypassing feature

allow injected scripts to bypass CORS using provided API

delay loading of js code in test_policy_enforcing.py

We don't want JS loading to happen upon python module load. We want to do it lazily. Here it was being done eagerly due to some previous overlooking.

prepare for exposing APIs to injected scripts

serialize and deserialize entire Response object when relaying fetch() calls to other contexts using sendMessage

add dist make target

don't double-modify response headers retrieved from cache

make the order of rules in generated CSP deterministic

This is purely to help with automated testing.

treat "view-source:" pages as privileged