Well.. it isn't really a security flaw. All Firefox extensions can read/write to files and since Ubiquity commands run with the same privileges as extensions, they can do it, too. In my mind, this is in fact desirable because if we were to not allow Ubiquity commands to do certain things, they will just become glorified bookmarklets. - Abi
2008/10/23 qYurius <[EMAIL PROTECTED]> > > You're right - it is a security flaw. But I'm using Ubiquity to gain > more control of Firefox (and Firefox extensions). I'm only using > scripts I've made or tweaked. > > I peeked inside QuickJava and found how to turn JavaScript off and on, > so I copied the process in a Ubiquity script. > (QuickJava: https://addons.mozilla.org/en-US/firefox/addon/1237) > > I added a little functionality to the CountdownClock extension and > wrote a script to automatically open an EasyShare page after its timer > reached 0. > (CountdownClock: https://addons.mozilla.org/en-US/firefox/addon/468) > > Just little ways to make my browsing experience better. > > Incidentally, I changed Ubiquity's "utils.js" to allow me to call a > few JSLib functions. > > The test command above can be shortened to: > > function cmd_test(){ > var file = Utils.jslib_file("c:\\temp\\foo.dat"); > file.open("w"); > file.write("This is a test\n"); > file.close(); > } > > By adding these functions to utils.js: > > Utils.__jslib_init = function __jslib_init( lib ){ > if( (typeof(window.jslib) !== "object") || (window.jslib.RESERVED == > null) ){ > displayMessage( "jslib not installed" ); > return false; > } > > var jslib_regex = /^chrome:\/\/jslib\/content/; > var jslib_abbv = /^jslib_\w+$/; > window.jslib.init( window ); > > if( jslib_abbv.test( lib ) ){ > lib = window[ lib ]; > } > > if( !jslib_regex.test( lib ) ){ > displayMessage( "Library not found: ("+ lib +")" ); > return false; > } > > window.include( lib ); > return true; > } > > Utils.jslib_file = function jslib_file( filename ){ > if( Utils.__jslib_init( "jslib_file" ) ){ > return new window.File( filename ); > } > } > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "ubiquity-firefox" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/ubiquity-firefox?hl=en -~----------~----~----~----~------~----~------~--~---
