Hi, all !

Can anybody help me ?

I'm writing XPCOM component and I want it will be accessible
from untrusted script without request adiitional privileges.

My component implements nsISecurityCheckedComponent
and nsIClassInfo interfaces.

I can't use following thing from untrusted code
    var Obj = Components.classes["..."].createInstance();
because to execute this additional privileges are required ( Is it right
always besides pref.js changing ? ).

I'm using another way. In module registration proc I add registry settings
under "JavaScript global constructor" category. This gives me ability create
instance using regular new operator:
    var Obj = new MyClassName();

The problem is that the list under this category loaded only on startup I
see
and I have restart browser to make this working.

Is there another way to create component instance from untrusted code
on-the-fly without restarting browser ?

Boris.




Reply via email to