Haketilo

allow injected scripts to bypass CORS using provided API

prepare for exposing APIs to injected scripts

serialize and deserialize entire Response object when relaying fetch() calls to other contexts using sendMessage

improvement to also properly sanitize intrinsics in XML documents under older browsers (IceCat 60)

improve script blocking in non-HTML documents (XML)

fix setting of 'blocked-blocked<...>-' attributes and add tests

for () loop styling

fix setting of 'blocked-' attributes when blocking intrinsic event handlers

prepend all generated console messages with 'Haketilo:'

fix comment typo