[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mozilla-rdf
Subject:    Re: Refreshing RDF loaded from remote location
From:       Dennis Noordsij <dennis.noordsij () wiral ! com>
Date:       2001-05-30 9:34:44
[Download RAW message or body]

>> Is there a Javascript/XUL option I am missing, or a security setting or
>> option (I could live with the user having to click "yes" to something,
>> but I don't want to tell them to fire up vim/emacs/notepad and change
>> prefs.js or wherever it is :-)
> 
> 
> There is a convoluted way to mangle your preferences to allow this sort
> of stuff to work. I can't remember how to do it.
> 
> chris
> 


Hi,

I found the security related documents on Mozilla, ended up asking for 
privileges for UniversalXPConnect which prompts the user (requires me to 
sign my scripts but that is a good idea either way), and after that things 
work just dandy :-)

HOWEVER - i was trying to avoid having to prompt the user for as long as 
possible (i.e. here I thought that if the RDF comes from the same location 
as the XUL it is allowed). My experience with users is that they will 
happily download any program off the Internet and install/run it, without 
any regards for security or understanding that this program can do whatever 
it pleases - yet when I offer a completely secure, digitally signed 
XUL/JS-based-app-from-a-website, with no privileges (file access, etc) 
whatsoever, that needs to pop up a warning screen (for example to make an 
outgoing TCP/IP connection) the user panics, probably uninstalls Mozilla 
and all related components, scans for virusses, and blames the worm that 
infested their Word documents months ago on that dangerous remote Mozilla 
thing.
 :-)


Thanks everyone :-)
Dennis 

[prev in list] [next in list] [prev in thread] [next in thread]