On Thu, May 7, 2009 at 4:09 PM, Adam Barth <[email protected]> wrote: > Ugg.
I know. What can I say? We are caught between idealism and practicality. > 1) If the response has the right MIME type, then we can believe that > the site has endorsed the extension. As Adam says, "Site > http://foo.bar.com wises to install an extension." > > 2) If the response has one of the following Content-Types: > * No Content-Type > * text/plain > * application/octet-stream > AND the URL has the ".crx" extension AND the response starts with a > magic string (such as "CHROME EXTENSION"), then believe that the > response is an extension, but don't believe that the site has endorsed > the extension. As Adam says, "An unknown party wishes to install an > extension." Ok, thanks for the recommendation. Currently the magic string is "Cr24". Not enough characters? - a --~--~---------~--~----~------------~-------~--~----~ Chromium Developers mailing list: [email protected] View archives, change email options, or unsubscribe: http://groups.google.com/group/chromium-dev -~----------~----~----~----~------~----~------~--~---
