XUL:Remote XUL bugs: Difference between revisions

m
Line 42: Line 42:
A file save dialog would be similar to the above, allowing a remote script to present a javascript string to be saved or an output stream or something.  I am not as sure about this, since it might be possible to load the data into a hidden iframe and then call the document.execCommand('SaveAs',null,filename) command.  Again, this seems possible already.
A file save dialog would be similar to the above, allowing a remote script to present a javascript string to be saved or an output stream or something.  I am not as sure about this, since it might be possible to load the data into a hidden iframe and then call the document.execCommand('SaveAs',null,filename) command.  Again, this seems possible already.


(Ben Bucksch) I agree that this would be secure, if implemented correctly and the dialog makes the user aware whom they are giving the file content to. Compare [http://www.jnode.org/node/900 my security proposal for JNode]. However, this is an RFE (not a Mozilla bug) and probably quite some work.
(Ben Bucksch) I agree that this would be secure, if implemented correctly and the dialog makes the user aware whom they are giving the file content to. Compare [http://www.jnode.org/node/900 my security proposal for JNode]. However, this is an RFE (not a Mozilla bug) and probably quite some work in security testing.


= Not a bug =
= Not a bug =
Confirmed users
591

edits