Re: Problems with the InstallationCheck script
Re: Problems with the InstallationCheck script
- Subject: Re: Problems with the InstallationCheck script
- From: Peter Bierman <email@hidden>
- Date: Mon, 3 Dec 2007 18:28:18 -0800
At 6:17 PM -0800 12/3/07, Nathan Duran wrote:
On Dec 3, 2007, at 6:11 PM, Bill Coderre wrote:
Security Note:
The Installer's JavaScript environment is a "Sandbox" that prevents
your package from actually modifying the computer's hard disks
until the user clicks "Install." (Same goes for IFRequirements.) If
your javascript runs external code, or your installer script relies
on InstallationCheck and VolumeCheck to decide stuff, the user will
see the "This installer must run code" warning.
Is the need to effectively sandbox the packages' code the reasoning
behind JavaScript's selection as the language of choice for this
process?
Yes, exactly.
Furthermore, this isn't JavaScript + DOM like in a web browser. There
are no DOM methods available in the installer's JavaScript sandbox.
Instead, there are a small number of utility functions available
under the global 'system' object.
-pmb
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Installer-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden