Ahryman40k wrote:
> But i have another problem when trying to use my component from a web page 
> :s
> I think it is a security issue because javascript can use it when executed 
> from local with a security alert, but nothing works when executed from web.
> At the beginning, i was thinked that signing my package will correct this, 
> but the problem is still present.

The signature of an XPI file is just checked at installation time -
later on, Firefox completely ignores the files in the META-INF/
subdirectory... so signing an XPI doesn't really "improve" the security
of an extension after its initial install.

> Do you have an idea ??

I suggest you try mozilla.dev.tech.xpcom (or mozilla.dev.extensions,
possibly) for this kind of questions. dev.tech.crypto isn't really the
right place for that.

Kaspar
_______________________________________________
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to