Pete wrote:
2009/6/8 Matthew Wilson <[email protected]>:
I needed to do something similar. I assume you want to prevent security
bypasses from the untrusted content.

My eventual solution was far from elegant but worked OK: to create a "data:"
URL containing the encoded form of the document, then to use
document.getElementById("xxx").webNavigation.loadURI with that URL.

This might also be of help:
http://adblockplus.org/blog/displaying-web-content-in-an-extension-without-security-issues

Perfect - thanks Matthew, that is exactly what I was looking for.
I'd highly recommend that article to anyone wanting to display
untrusted content in an extension.

It was also copied to MDC, which I guess is probably a better place to look going forwards:

https://developer.mozilla.org/En/Displaying_web_content_in_an_extension_without_security_issues

Matthew
_______________________________________________
Project_owners mailing list
[email protected]
https://www.mozdev.org/mailman/listinfo/project_owners

Reply via email to