Hi I was trying to set a uri policy to control outgoing network on guest 
javascript but it looks like the policy is ignored. Below is the code 
snippet I used:

var uriPolicy = {
  rewrite: function(uri) {
    return undefined;
  }
};

caja.load(undefined, uriPolicy, function(frame) {
  frame.code('url-to-javascript', 'application/javascript')
       .api({ document: 
document.getElementById('some-iframe').contentWindow.document; })
       .run();
});

Guest javascript basically look like this:
document.writeln("<SCRIPT language='JavaScript1.1' 
SRC=\"https://ad.doubleclick.net/some-ad\";>");
document.writeln("</SCRIPT>");

Unfortunately the uriPolicy here doesn't have any effect on returned 
javascript. Could you please help me with this issue? Thanks.

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"Google Caja Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to