On Tue, 19 Jan 2010, Adam Barth wrote: > > Consider the case of Google Gears. Gears provides access to databases > based on the origin of the embedding page. Unfortunately, Gears doesn't > understand text/html-sandboxed and so would grant the sandboxed content > access to the origin's databases. Oh, plugins don't use the origin determined by the user agent? Yeah, in that case plugins should definitely be blocked in the page. Ok. Will do. -- Ian Hickson U+1047E )\._.,--....,'``. fL http://ln.hixie.ch/ U+263A /, _.. \ _\ ;`._ ,. Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'Received on Wednesday, 20 January 2010 01:58:30 UTC
This archive was generated by hypermail 2.4.0 : Saturday, 9 October 2021 18:45:08 UTC