User-agent: Mozilla Thunderbird 1.0 (Windows/20041206)
Thank you very much for the detailed information.
I will try to change my code.
Nick Kocharhook wrote:
On May 9, 2005, at 1:39 AM, Keiichi Yamada wrote:
I wrote a PDE (Print Dialog Extension) for my printer driver.
Our own help file (HTML) is shown when the Help (?) button on Print
Dialog is clicked.
The 'help' event handler of my PDE calls AHGotoPage() like:
We're no longer allowing this due to security concerns.
AHGotoPage() turns this request into a help:// URL, which is then
passed to Help Viewer. But there's no way for Help Viewer to know if an
arbitrary file passed to it via help:// is OK or if it's a page with
malicious JS that has been downloaded without the user's knowledge.
Our solution to this problem was to only open pages from registered
help books. A malicious web page can't call AHRegisterHelpBook(), so
the user would actually have to download and run something to get a
help book registered.
The side effect of this is that help:// URLs no longer work. The
workaround is to use help:openbook URLs instead. One also uses
AHGotoPage to create these, like so:
bundleURL = CFBundleCopyBundleURL(mainBundle);
status = AHRegisterHelpBook(&bundleFSRef);
The content of 'bundleFSRef' is
This AHRegisterHelpBook() returns noErr.
But the AHGotoPage() does not work.
The same error message is shown on Console.
You're halfway there. We're going to post a Q&A about this problem soon.
Do not post admin requests to the list. They will be ignored.
Apple-help-authoring mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden