[Bug 29506] Support for a system-wide configuration file to specify permissions for web-applications

https://www.w3.org/Bugs/Public/show_bug.cgi?id=29506

--- Comment #6 from sworddragon2@aol.com ---
I have now read the link but fail to see the problem here or why an UI to ask
the user is needed. Let's say the user downloads some_fancy_webapp, executes
its installer and it installs into /usr/share/some_fancy_webapp and registers
itself in the file proposed by this ticket let's say in
/etc/www/webapp-permissions.txt and gives itself all permissions. The user
starts now the web-application in the browser as
file:///usr/share/some_fancy_webapp/index.html and the web-application would
now be able to do for example easily cross-origin XHR because of the entry its
installer made into /etc/www/webapp-permissions.txt.

Since the web-application was installed explicitly by the user he trusts it the
same as he would with a native system application. There is no need to ask the
user with an UI for extra permissions anymore and since he trusts the
web-application it can safely do for example cross-origin XHR.

Am I missing something specific here why this should not be possible? Because
having the ability to write local web-applications that are cross-platform and
run in managed code would be a nice opportunity compared to writing them in a
language that compiles to machine code.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Friday, 26 February 2016 15:43:16 UTC