Comment by garaetjjte

Killing javascript access to file:// would be annoying for quick experimenting. Maybe denying network access to locally loaded JS, so that nothing could be transferred out is possible solution?