W3C home > Mailing lists > Public > public-html@w3.org > June 2010

Re: text/sandboxed-html

From: Adam Barth <w3c@adambarth.com>
Date: Mon, 14 Jun 2010 16:25:22 -0700
Message-ID: <AANLkTil4LWK5CrWn-WSoHlZhvRHWqNptTlp-QtvZs4ua@mail.gmail.com>
To: Joe D Williams <joedwil@earthlink.net>
Cc: robert@ocallahan.org, Artur Adib <arturadib@gmail.com>, Maciej Stachowiak <mjs@apple.com>, public-html@w3.org, Leonard Rosenthol <lrosenth@adobe.com>, Ian Hickson <ian@hixie.ch>
On Mon, Jun 14, 2010 at 4:07 PM, Joe D Williams <joedwil@earthlink.net> wrote:
>> plug-ins that don't understand sandboxing?
>
> The only way a plugin has any glimmer of "understanding 'sandboxing" is when
> the host context refuses to perform an operation requested by the
> 'sandboxed' context.

The current proposal is to communicate the sandbox state to the
plug-in via the plug-in API.

> For sandboxing to work, then the host must understand and actually implement
> the 'sandboxing' controls that the document author is requesting in a way
> that ends up delivering reasonable results in all WWW html5 browsers in
> which the UA provides the end user audience with the tools to permit a
> sandboxed context to exist.

Many plug-ins talk directly to the operating system to perform various
actions, so we need the plug-ins cooperation to make good on these
promises.

Adam
Received on Monday, 14 June 2010 23:26:16 UTC

This archive was generated by hypermail 2.3.1 : Monday, 29 September 2014 09:39:18 UTC