On mar, 2014-06-17 at 02:04 +0000, Zhang, Xu U wrote:
(snip)

> [Zhang Xu ] Yes, extension is not trusted. The third party can implement 
> their extensions. 

How are third party extensions installed? Is it a tizen feature?

> In crosswalk original API permission design, which has been dropped because 
> Cynara security
>  framework proposed, extension must send an IPC to browser process to do 
> permission check
>  before extension talk to service.

Is it possible for an extension to call the service even if the
permission was refused by the browser process? From what I'm reading the
answer should be true. But from what I understand of the security, the
answer should be no. So?

Best regards
José
>  
(resnip)



_______________________________________________
Dev mailing list
[email protected]
https://lists.tizen.org/listinfo/dev

Reply via email to