It's not the script you have to trust so much as the pages it runs on. 
And that's too much to expect from users, in general. Plus, it adds 
complexity (which usually means bugs and more strange behavior) for very 
little benefit to most users or even developers.

Sorry about that, but security is security.


So probably your only option now is to use DOM events and elements to 
pass parameters from the eval()ed code to the GM_ functions in the 
script and return values back from the GM_functions in the script to the 
eval()ed code, which is what I was trying to get at in my previous 
messages. (Complicated, I know, but I'm fairly sure it can be made to 
work.) Does that make sense?

Jan Buschtöns wrote:
> That's stupid... There should be a button like 'Trust this Script'. Is
> there really _no other Way_ ?
>
> On 20 Jul., 20:38, Anthony Lieuallen <[email protected]> wrote:
>   
>> On 7/20/2009 2:36 PM, Jan Buschtöns wrote:
>>
>>     
>>> That's not possible, because the GM_functions must be executed on the
>>> actual page.
>>>       
>> Actually, because they must _not_ be executed on the page.  They must be
>> executed within the script's sandbox.  It's impossible (given our
>> current knowledge) to consistently tell the difference betweeneval()
>> and a malicious attack (coming from the page), so it is blocked.
>>     
> >
>
> ____________________________________________________________________________________
> Free information on Digital Photography. Click Now!
> http://ads.lavabit.com/fc/BLSrjwrriA79cMBETCjViaM7H3nZ77RU4LAyujpk6iRh9WdgcqPG2gjv11e/
> ____________________________________________________________________________________
>   


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"greasemonkey-users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/greasemonkey-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to