On Wed, Dec 23, 2009 at 10:39 AM, Andy Ames <[email protected]> wrote:
> Does anyone have suggestions on where to put the suppress print dialog > setting? In Firefox, this is done in about:config. Since it's typically a > developer feature, I want to hide it from the casual user. > Unless mhm never landed it, we already have a Kiosk mode command line switch; it would probably make sense to add it to that. Also, since security is important, I need to make sure a website cannot > install a malicious script that can change the value of this setting and > start sending print jobs. > Our settings aren't accessible from JS. If you add the behavior to a command-line switch, the only way to "change the value" would be for the site to be able to kill your process and launch a new one with different switches. If the site can do that it can do pretty much anything, so I don't think you have any situation-specific worries here, just the general don't-allow-remote-code-local-execution. PK -- Chromium Developers mailing list: [email protected] View archives, change email options, or unsubscribe: http://groups.google.com/group/chromium-dev
