Re: [webkit-dev] a simple isolatedworlds alternative for uzbl?

2010-01-28 Thread Dieter Plaetinck
On Wed, 27 Jan 2010 23:01:17 -0800 Adam Barth aba...@webkit.org wrote: Getting this right with the approach you seem to be taking is extremely difficult. The problem is not that the local script is untrustworthy. The problem is that the web page it's interacting with might be able to steal

Re: [webkit-dev] a simple isolatedworlds alternative for uzbl?

2010-01-28 Thread Adam Barth
On Thu, Jan 28, 2010 at 12:40 AM, Dieter Plaetinck die...@plaetinck.be wrote: On Wed, 27 Jan 2010 23:01:17 -0800 Adam Barth aba...@webkit.org wrote: Getting this right with the approach you seem to be taking is extremely difficult.  The problem is not that the local script is untrustworthy.  

Re: [webkit-dev] a simple isolatedworlds alternative for uzbl?

2010-01-28 Thread Dieter Plaetinck
On Thu, 28 Jan 2010 08:01:19 -0800 Adam Barth aba...@webkit.org wrote: On Thu, Jan 28, 2010 at 12:40 AM, Dieter Plaetinck die...@plaetinck.be wrote: On Wed, 27 Jan 2010 23:01:17 -0800 Adam Barth aba...@webkit.org wrote: Getting this right with the approach you seem to be taking is

Re: [webkit-dev] a simple isolatedworlds alternative for uzbl?

2010-01-28 Thread Adam Barth
On Thu, Jan 28, 2010 at 11:57 AM, Dieter Plaetinck die...@plaetinck.be wrote: I guess we can only wait for isolatedworlds to appear in the gtk+ port :) I suspect they would welcome patches. (They should be pretty easy patches.) :) Adam ___

Re: [webkit-dev] a simple isolatedworlds alternative for uzbl?

2010-01-27 Thread Adam Barth
Getting this right with the approach you seem to be taking is extremely difficult. The problem is not that the local script is untrustworthy. The problem is that the web page it's interacting with might be able to steal its privileges. Isolated worlds should be implemented in webkitgtk+ thanks