Ian Hickson wrote:
Why not just improve both navigator.registerContentHandler and
navigator.registerProtocolHandler?

http://groups.google.com/group/web-intents/browse_thread/thread/3dff7c2cdf5815b8

I tend to agree with rolling this in to RCH and RPH and seeing if we could refine the processing algorithms therein to satisfy the security issues highlighted in that thread (i.e. ensuring the cross document messaging channel setup from a window.open with a registered protocol handler is origin bound).

Reply via email to