Re: WebKit question
Re: WebKit question
- Subject: Re: WebKit question
- From: Jonathan Wight <email@hidden>
- Date: Tue, 11 Nov 2003 13:03:58 -0600
On Nov 11, 2003, at 12:51, Dan Sugalski wrote:
On Tue, 11 Nov 2003, Jonathan Wight wrote:
Hi Alesh,
There is nothing built in to WebKit (or JavaScriptCore/WebCore) to
enable this. IMO there should be.
Are you really sure? This would seem to open up some pretty massive
potential security holes--getting authorization and privilege
restriction
right in an environment like this is decidedly non-trivial, and I can't
think of a way to make this reasonably safe if an app with this
capability
has external page fetching capabilities as well.
I don't think Apple needs to provide XPCOM/ActiveX type high level
functionality. But they do (again IMO) need to provide a hook so people
embedding WebKit in Web Applications for example, can extended the
JavaScript API. Its up to the application developer to understand the
security issues. By not having a hook WebKit has limited usefulness
(unless you're willing to provide a hacked together solution).
Jon.
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.