The core of the issue is that the browser and the plugin typically
come from different entities, and therefore the plugin shouldn't be
allowed to execute code under the browser's identity. Otherwise, the
plugin will implicitly have all the browser's permissions, which is a
serious security issue.

JBQ

On Wed, Jun 10, 2009 at 6:37 PM, Stanley Cai<stanley.w....@gmail.com> wrote:
>
> JBQ,
>
> Can you please explain more on the issue? Is the issue about rendering
> system or security? Actually we have a small GPLflash port and plugin
> implementation in Android. But I did not get all the things work
> correct in webkit.
>
> Best regards,
> -stanley
>
> On Wed, Jun 10, 2009 at 1:21 PM, Jean-Baptiste Queru<j...@android.com> wrote:
>>
>> The biggest issue by far is to be able to run the plugin as a separate
>> UID (and therefore in a separate process).
>>
>> JBQ
>>
>> On Tue, Jun 9, 2009 at 9:53 PM, Stanley Cai<stanley.w....@gmail.com> wrote:
>>>
>>> Hi list,
>>>
>>> As I worked on Android webkit plugin, I found it only supports
>>> so-called window-less mode. In the mode, I can get a buffer to render.
>>> But I can not get any keyboard input and can not use Android UI
>>> widgets (for example, input box, pull-down selector box and etc) in my
>>> plugin.
>>>
>>> If any googler monitor this list, could you please inform if Google
>>> has any plan to support advanced Android webkit plugin modes to
>>> support these features.
>>>
>>> Best regards,
>>> -stanley
>>>
>>> >
>>>
>>
>>
>>
>> --
>> Jean-Baptiste M. "JBQ" Queru
>> Android Engineer, Google.
>>
>> Questions sent directly to me that have no reason for being private
>> will likely get ignored or forwarded to a public forum with no further
>> warning.
>>
>> >
>>
>
> >
>



-- 
Jean-Baptiste M. "JBQ" Queru
Android Engineer, Google.

Questions sent directly to me that have no reason for being private
will likely get ignored or forwarded to a public forum with no further
warning.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"android-framework" group.
To post to this group, send email to android-framework@googlegroups.com
To unsubscribe from this group, send email to 
android-framework+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/android-framework?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to