Comment #31 on issue 18857 by [email protected]: Support for GM Functions  
(Greasemonkey) in Chrome
http://code.google.com/p/chromium/issues/detail?id=18857

unsafeWindow indeed is useful in the 99% of scripts that do not store  
important user
data across multiple domains. Given that you already ruled out  
GM_xmlhttpRequest,
what harm could come from exposing the GM script's privates to the web  
site? The
GreaseMonkey script has no more privileges than the origin site.

In Opera and Safari, user scripts run in the same namespace as the site  
itself
(equivalent to doing everything through unsafeWindow) and there is no  
problem with
that.


--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

-- 
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs

Reply via email to