W3C home > Mailing lists > Public > public-html@w3.org > January 2010

Re: Disallow plug-ins in text/html-sandboxed? (was: Re: text/sandboxed-html)

From: Ian Hickson <ian@hixie.ch>
Date: Wed, 20 Jan 2010 01:58:01 +0000 (UTC)
To: Adam Barth <w3c@adambarth.com>
Cc: Maciej Stachowiak <mjs@apple.com>, "public-html@w3.org" <public-html@w3.org>
Message-ID: <Pine.LNX.4.64.1001200157230.3759@ps20323.dreamhostps.com>
On Tue, 19 Jan 2010, Adam Barth wrote:
> 
> Consider the case of Google Gears.  Gears provides access to databases 
> based on the origin of the embedding page.  Unfortunately, Gears doesn't 
> understand text/html-sandboxed and so would grant the sandboxed content 
> access to the origin's databases.

Oh, plugins don't use the origin determined by the user agent?

Yeah, in that case plugins should definitely be blocked in the page. Ok. 
Will do.

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'
Received on Wednesday, 20 January 2010 01:58:30 UTC

This archive was generated by hypermail 2.3.1 : Monday, 29 September 2014 09:39:12 UTC