Re: AppleScript & HTML Again...
Re: AppleScript & HTML Again...
- Subject: Re: AppleScript & HTML Again...
- From: Walter Ian Kaye <email@hidden>
- Date: Fri, 26 Mar 2004 19:48:21 -0800
At 04:08p -0600 03/26/2004, John C. Welch didst inscribe upon an
electronic papyrus:
On 3/26/04 3:24 PM, "Walter Ian Kaye" <email@hidden> wrote:
> I've often thought about the ability to download and run an
> AppleScript. In my case, the runner (aka HTTP helper) app would
> analyze the script and check it against a whitelist. If it passes, it
> gets run; if not, a dialog appears stating why it was, uh, arrested.
> I think that's how Java's sandbox works, isn't it?
>
> I don't know if there's any way for a helper app to know where its
> file came from, so I don't see how you would check the address.
There are a number of ways to deal with this.
The simplest is to require some form of manual intervention in the form of a
dialog
I'm actually leaning more towards the file intermediary, as not only
could it store the URL of the script, but it could be an XML file
that stores additional information such as an itemization of script
events. For example:
<description>This is a Hello World test script.</description>
<meta>
<author>Walter Ian Kaye</author>
<created>2004-03-26</created>
<modified>2004-03-26</modified>
<version>1.0</version>
<page>
http://www.natural-innovations.com/scpt/HelloWorld.html</page>
</meta>
<text>
display dialog "Hello World."
</text>
<scpt>
http://www.natural-innovations.com/scpt/HelloWorld.scpt</scpt>
<event id="1">
<code>sysodlog</code>
<term>display dialog</term>
<usage id="1">Display of Hello World text.</usage>
<source>
<name>Standard Additions</name>
<oem>yes</oem>
<url></url> <!-- only if not oem -->
</source>
</event>
The runner would then download the <scpt>, check its events against
those itemized, check those against the global and URL-specific event
whitelists, and if all is copascetic(sp?) then run the script. If any
required scripting additions or scripted apps are absent, the
itemization could be used to inform the user.
-boo
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.