Haketilo

make popup always show information about the main frame

fix SVG script blocking

remove unneeded import in policy_enforcing.js

force tags

prevent injected scripts from executing out of order

add more tests for CORS bypassing feature

allow injected scripts to bypass CORS using provided API

prepare for exposing APIs to injected scripts

serialize and deserialize entire Response object when relaying fetch() calls to other contexts using sendMessage

improvement to also properly sanitize intrinsics in XML documents under older browsers (IceCat 60)