Re: What defines a "plugin"? WRT sandboxing? from Tab Atkins Jr. on 2010-01-24 (public-html@w3.org from January 2010)

From: Tab Atkins Jr. <jackalmage@gmail.com>
Date: Sun, 24 Jan 2010 11:18:03 -0600
To: Maciej Stachowiak <mjs@apple.com>
Cc: Leonard Rosenthol <lrosenth@adobe.com>, "public-html@w3.org" <public-html@w3.org>
Message-ID: <dd0fbad1001240918v72d99c13o656ba2c471d9dc4d@mail.gmail.com>

On Sun, Jan 24, 2010 at 11:02 AM, Maciej Stachowiak <mjs@apple.com> wrote:
> I think the bottom line is for any given piece of code, can you verify that
> it enforces the sandbox constraints?

It's possible that different UAs have different verification
abilities.  Would this cause any problems?  The definition of "plugin"
you've stated for this purpose should suffice to prevent security
issues even if different UAs react to various plugins differently, but
there's still the matter of author expectations.

~TJ

Received on Sunday, 24 January 2010 17:18:50 UTC