On 10 Dec 2008 at 7:36, Robert Hanson wrote: > But, really, it's simpler than that if you want to disallow all > callbacks and every last bit of JavaScript capability of the applet -- > > just don't have "mayscript" in the applet tag.
Ah, interesting. But then jmolButton() et al. do nothing. I mean, the button is not written to the page*. A very safe mode indeed, but not what we need for the Wiki. So I will go with the " _jmol.noEval" method. *) Rightly so, since they would not be able to send scripts to the applet. Oh, not exactly! If I add a button using <input type="button" value="cpk off" onClick="jmolScript('cpk off')"> it does send the script to the applet. So "mayscript" is unidirectional: its absence blocks Jmol from talking to javascript, and blocks Jmol.js from generating UI controls, but does not block Jmol from listening to javascript. Intriguing... (tested in WinXP, Firefox, IE7 and Opera) This is the reference I recalled: http://www.javasonics.com/support/check_liveconnect.php ------------------------------------------------------------------------------ SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ _______________________________________________ Jmol-users mailing list Jmol-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jmol-users