It's often necessary to allow same-host scripts for extensions or bookmarklets to work. Those some-host scrips are often a considerable part of the problem.