Jaywalker wrote:
Presumably because you never set the owner on your channel. See the
code in newChannel in that kb article you link to that does so.
ah. now i see. they open up a fake chrome channel to a valid xul-file
and just "copy" the owner and thus the privileges.
Right.
hmm. this looks more like a hack.
It is; ideally getSystemPrincipal() would be scriptable...
do you think this is safe for the future?
Only as safe as the nsIChannel API, which is "somewhat". We keep
meaning to basically completely change the networking APIs, but until
then you're safe.
-Boris
_______________________________________________
dev-tech-network mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-network
