[Caja] Script inclusion error

This is a continuation of over here . I am trying to include a script in a guest page, however the script does not run and I get an error: Uncaught script error: Uncaught Error: not loaded in source: " http://localhost:8000/test.js; at line: -1

Re: [Caja] Script inclusion error

em, but I do not expect to > have time to investigate today. > > On Wed, Feb 7, 2018 at 10:05 AM, Marc H <zappy...@gmail.com > > wrote: > >> This is a continuation of over here >> <https://github.com/google/caja/issues/2030>. >> >> I am trying

Re: [Caja] Script inclusion error

Is there any workaround, or way to give the guest script access to these objects? On Friday, February 9, 2018 at 8:33:27 PM UTC, Kevin Reid wrote: > > On Fri, Feb 9, 2018 at 12:22 PM, Marc H <zappy...@gmail.com > > wrote: > >> Thanks so much the snippet now works! Now

[Caja] Dynamic guest page embedding

I am trying to use Caja to sandbox users' games, to prevent malicious code from being run, however when using Caja you us separate host and guest pages eg. example.com/host and example.com/guest My concern is that an attacker could simply link to the unsandboxed example.com/guest, and bypass

Re: [Caja] Script inclusion error

riter' in the > property names. > > (Your script will also not work because it tries to access the #main > element before that part of the HTML has been parsed, but that is the same > as a normal browser environment and the error message will be actually > useful for that.) > &g