This is meant as a meta-issue to collect use cases not (yet?) covered by declarativeNetRequest which currently prevent MV2 extensions relying on blocking webRequest from migrating.

It aims to either justify keeping blocking webRequest around, better if asynchronous like in Firefox, for specific use cases requiring an ad-hoc permission, or to alternatively obtain clear and actionable instructions to serve the same use cases with available MV3 technology.

Already filed:

• DNR cannot handle POST payloads (use case: anti-XSS/CSRF protections) #109
• Dynamic data-driven Tracking Protection not possible with DNR #88
• Malware / Phishing protection not possible in Manifest V3 #82
• Blocking webRequest usecase - add, modify and remove CSP directives  #169
• Blocking webRequest usecase - Quick prototyping / deployment of defenses against new security threats (e.g. Leakuidator+) #255
• Blocking webRequest usecase - GM_xmlhttpRequest for Tampermonkey/Violentmonkey userscripts #176