On Mon, Nov 12, 2012 at 8:34 AM, Gervase Markham <[email protected]> wrote: > On 09/11/12 13:31, Robert Kaiser wrote: >> >> There's no about: pages that run in chrome mode at all (which most do), >> i.e. no about:config, about:crashes, about:memory, etc. - we cannot run >> chrome-privileged pages inside content-privileged apps due to security >> reasons. This bites us in multiple case and we can't do a lot about it >> (actually, there's work ongoing to re-implement "something like >> about:crashes" with various tricks to not require chrome access, but I >> consider this quite hackish). > > Can we solve it by creating a separate, trusted app which displays the data > which would be displayed on those pages? Or would there be a problem with it > getting access to it because it's not part of the same app?
It's software. Anything is possible. However it would take re-implementing all of the about: pages using the B2G security model rather than using chrome-privileged code. I don't think adding the ability to set preferences has the right time vs. added hackability vs. bricking-risk ratios. / Jonas _______________________________________________ dev-b2g mailing list [email protected] https://lists.mozilla.org/listinfo/dev-b2g
