On Tue, Jun 16, 2015 at 10:06 AM, Paul Rouget <[email protected]> wrote:

> What would be the right approach to allow such a feature?
> Would adding a new permission help?
>

Well, it sorta depends on what you're trying to accomplish. browser.html is
supposed to be creating a web browser using only "the web", right? If we
add a privilege that more or less equates to the "UniversalXPConnect" of
days past, is that really the web anymore? Why not just run with System
Principal like Firefox does?

Again, maybe we're fine with this, and maybe the B2G system app already has
permissions like this (I don't know much about it - hopefully people who
know more can chime in). But that's the crux of the issue we need to
answer, IMO. AFAICT, the webview APIs you're comparing with are embedding
APIs, and aren't ever intended to be exposed to the web.

bholley
_______________________________________________
dev-platform mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to