Note that you can actually send xul from the network and use javascript 
to cause it to appear in a popup and fooling someone into thinking it's 
a real navigator window I think.

basic

jesus X wrote:

> benjamin mooney wrote:
> 
>>is there a way that chrome files can be accessed within a web page and
>>used functionaly? i tried taking a copy of editor.xul and calling it
>>from an iframe, it displayed perfectly but lost all functionality.
>>
> 
> No. That type of operation has been specifically disabled for security.
> 
> 
>>being able to access chrome files in this way would allow you create an
>>inline editor similar to ones using ie's editable frame property.
>>
> 
> It can also be used to fool someone into thinking it's a real navigator window,
> and trick them into revealing sensitive information.
> 
> 
>>does anyone know of any work being done in this area?
>>
> 
> No, like I said, it's been prevented.
> 
> --
> jesus X  [ Booze-fueled paragon of pointless cruelty and wanton sadism. ]
>  email   [ jesusx @ who.net ]
>  web     [ http://burntelectrons.com ] [ Updated April 29, 2001 ]
>  tag     [ The Universe: It's everywhere you want to be. ]
>  warning [ War doesn't determine who is right, war determines who is left. ]
> 



Reply via email to