site_archiver@lists.apple.com Delivered-To: installer-dev@lists.apple.com On Dec 3, 2007, at 6:11 PM, Bill Coderre wrote: Yes, exactly. -pmb _______________________________________________ Do not post admin requests to the list. They will be ignored. Installer-dev mailing list (Installer-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/installer-dev/site_archiver%40lists.a... At 6:17 PM -0800 12/3/07, Nathan Duran wrote: Security Note: The Installer's JavaScript environment is a "Sandbox" that prevents your package from actually modifying the computer's hard disks until the user clicks "Install." (Same goes for IFRequirements.) If your javascript runs external code, or your installer script relies on InstallationCheck and VolumeCheck to decide stuff, the user will see the "This installer must run code" warning. Is the need to effectively sandbox the packages' code the reasoning behind JavaScript's selection as the language of choice for this process? Furthermore, this isn't JavaScript + DOM like in a web browser. There are no DOM methods available in the installer's JavaScript sandbox. Instead, there are a small number of utility functions available under the global 'system' object. This email sent to site_archiver@lists.apple.com