- From: Alexey Feldgendler <alexey@feldgendler.ru>
- Date: Tue, 15 May 2007 13:22:04 +0200
On Tue, 15 May 2007 13:02:51 +0200, Gervase Markham <gerv at mozilla.org> wrote: >> I'd treat these two problems as equally important. A separate HTTP >> request per forum comment on the page is completely unacceptable. > Would you really want separate security contexts for each comment? I wouldn't want to allow people screw up others' comments, making it look that other users wrote what they didn't write. So, yes, it's important that any code within a comment cannot change anything but itself. This also means that the comment should be unable to change the header/footer around it to pretend that someone else wrote it. -- Alexey Feldgendler <alexey at feldgendler.ru> [ICQ: 115226275] http://feldgendler.livejournal.com
Received on Tuesday, 15 May 2007 04:22:04 UTC