Francis Brosnan Blazquez wrote:
The other approach I've tried is to create a firefox extension, sign the
XPI package and then load all .js files via chrome:/// url but it makes
no difference. It still requires
signed.applets.codebase_principal_support to be enabled.

I don't see why, unless you did it wrong.

This approach also have the chrome:/// problem which is firefox
specific.

So are the socket APIs you're using, no?  Or at least Gecko-specific.

1. Is there a way to allow a user to configure its browser to accept a
list of "trusted" sites that are allowed to use UniversalXPConnect?

Yes, you can set the preferences that security manager would set if the user got prompted and accepted and say to remember that choice.

Note that we plan to remove enablePrivilege, so you might be better off not using it unless you want to redo your stuff in a year or two.

You could write an extension that listens to particular events from a particular site, or exposes some APIs to it. The latter is hard right now, but we're working on providing an easy way to do it.

-Boris
_______________________________________________
dev-tech-network mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-network

Reply via email to