[Bug 22901] Clarification regarding a potential CDM capable of running arbitrary code

https://www.w3.org/Bugs/Public/show_bug.cgi?id=22901

Nexus <nexus@xd6.co> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |nexus@xd6.co

--- Comment #2 from Nexus <nexus@xd6.co> ---
(In reply to comment #1)
> No for two reasons:
> 
> (1) code is not embedded in a media stream;
> (2) the function of the CDM is not to execute code (whether embedded in the
> stream or not), but to decrypt media content from the media stream;
> 
> What specific language in the specification makes you think it does either
> of these?

I fail to see how the CDM is going to decrypt media content WITHOUT running
arbitrary code.

However, as far as code being run with the same privileges as the user-agent,
1.2.1 does point out:
> Implementations may or may not separate the implementations of CDMs and may or may not treat them as separate from the user agent.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Thursday, 8 August 2013 12:40:18 UTC