[EMAIL PROTECTED] wrote:
> I have an html page which has an iframe, and this iframe contains
> signed scripts.

But the page itself is not signed, right?

> There are javascript function calls and objects need to be accessed in
> some.html from the top frame, like var x = top.whateverfunction(); or
> var s = top.somevar;

This is no longer possible if one page is signed and one is not.  The 
fact that it was ever possible was a bug (and a security hole, at that).

> I would like to get some help to fix this somehow.

There was an earlier thread in this newsgroup, with the subject "Signed 
Jar in JSP / Firefox 2.0.0.15" that covered this ground.

-Boris
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to