Mitchell Stoltz wrote:

> http://spywaresucks.org/prox/index.html
>
> it's software that runs regexps on incoming web pages. The author has 
> written regexps that do all kinds of interesting content filtration: 
> popup blocking, banner ad blocking, filtering various types of 
> annoying content, and cookie filters (by filtering http headers and/or 
> Javascript).

There are quite a number of packages that do that: I once tried to use 
muffin and filterproxy.

> Could we incorporate any of this guy's ideas into Mozilla?

This was supposed to be part of "Transformation Services", a "blue-sky" 
idea I once kind of worked on. Bug 13014. (But the "filters" in my old 
desgin didn't use the Mozilla HTML parser - please also consider the 
time when judging.)

> Please look through his list of filters and let me know of any you'd 
> particularly like to see implemented in Mozilla.

I already thought about a "santinizer" in Mozilla. It would be located 
near the parser and drop all tags and attributes not explicitly allowed. 
The rendering engine would never see them. This would be useful for HTML 
mail and "cleaner" web browsing.

>   Thoughts?

Great idea. I didn't know, if that was supposed to be on-topic in 
Mozilla. You can do that with external apps (like the one you 
mentioned), but they are a hassle to configure, for normal end-users at 
least.

On a related topic - I am totally unclear about how well we are 
protected against buffer overflows. Is the parser believed to be secure? 
Does it truncate bogus part, protecting the renderer from overflows?

Reply via email to