I'm fairly sure that neither _javascript_ nor XUL would be parsed and executed.  I could be wrong, but if it isn't a proper image format an error will occur.

The origonal question is if this is possible and the XUL <image> tag works like the HTML <img> tag. The 'src' attribute is a URL to an image resource, so as long as the schema is supported the image is a supported image format it should load.

- David
On 2/27/06, Adam Judson <[EMAIL PROTECTED]> wrote:
Is this a safe thing to do?

What if the server returns _javascript_ or xul rather than an image?

How does the security model work in this situation?

Adam


On 27/02/06, David Duong < [EMAIL PROTECTED]> wrote:
> Yes, I'm pretty sure you are able to.
>
> Try it!
>
>
> On 2/27/06, Andrew Archer <[EMAIL PROTECTED] > wrote:
> > Is it possible to display an png/gif/jpeg file which is not in the
> > chrome using <image>
> >
> >
> > _______________________________________________
> > Project_owners mailing list
> > [email protected]
> > http://mozdev.org/mailman/listinfo/project_owners
> >
>
>
> _______________________________________________
> Project_owners mailing list
> [email protected]
> http://mozdev.org/mailman/listinfo/project_owners
>
>
>
_______________________________________________
Project_owners mailing list
[email protected]
http://mozdev.org/mailman/listinfo/project_owners

_______________________________________________
Project_owners mailing list
[email protected]
http://mozdev.org/mailman/listinfo/project_owners

Reply via email to