Re: Comments on the Content Security Policy specification

2009-08-11 Thread Ian Hickson
On Thu, 30 Jul 2009, Gervase Markham wrote: > On 29/07/09 23:23, Ian Hickson wrote: > > * Remove external policy files. > > I'm not sure how that's a significant simplification; the syntax is > exactly the same just with an extra level of indirection, and if that > makes things too complicated

Re: Signed scripting

2009-08-11 Thread Adrian
More details: I've tried the whole procedure to create certificates at : http://books.mozdev.org/chapters/ch12.html#77079 and succeeded in it. But I still can't access my secured scripts through jar:http:// localhost.../myjar.jar!/secure.html In firebug I've got the response "Failed to load source

Re: Comments on the Content Security Policy specification

2009-08-11 Thread Gervase Markham
On 10/08/09 22:56, Sid Stamm wrote: I tried to find in my notes and email archives how exactly we decided to move the keywords out, and couldn't find anything specific. Anyway, I added an "options" directive to the spec[0] that captures this change. I also added a thread on the wiki discussion pa

Re: Comments on the Content Security Policy specification

2009-08-11 Thread Gervase Markham
On 10/08/09 19:50, Brandon Sterne wrote: Working examples will be forthcoming as soon as we have Firefox builds available which contain CSP. We shouldn't need to wait for working builds to try and work out the policies, should we? Although perhaps it would be a lot easier if you could test th

Signed scripting

2009-08-11 Thread Adrian
Hi everyone, Please tell me if I'm not posting on the right forum and where I can find the right place. I'm writing a script that has to be signed since it needs access to the brother's (firefox 3.0.13) DOM. As far as I know, I need a certificate to sign the script so I generated one with certuti