Updates:
Status: Obsolete
Comment #6 on issue 579 by [email protected]: Need another form of DOM
attenuation: this node doesn't communicate info from the user to event
handlers
http://code.google.com/p/google-caja/issues/detail?id=579
With the latest change by kpreid, https://codereview.appspot.com/8700044/,
we are no longer supporting the case where a DOM tree tamed by Domado is
shared between two security domains.
We also have never supported, and do not plan to support, the case of
moving DOM objects from one Domado tree to the other. If we move the
serialization (innerHTML) of the DOM trees, then that's just like the
target accepting an executing any other code from another source.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
---
You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
