On 02/24, Daniel Carl wrote:
> 1. In vim every opened file, independent from the displaying tab, belong to a
>    buffer. The buffer has some configurations assigned to. But in vimb we have
>    only windows/instances with confirmations that allow to open various URIs.
>    That means that we can change the config if a special domain is used. But
>    when the user surf to another page that does not match the autocmd pattern,
>    the instance will still use the change configuration that was applied via
>    autocmd.
> 
>         :au LoadUrlCommited *.trusted.org :set scripts=on
> 
>    If the user opens www.trusted.org the autocmd will be applied and enable
>    scripts. If the user opens another domain via `:open evil.org` or by
>    following a link on current page, the 'scripts' are still enabled.
> 
>    The challenge is to find a efficient way to switch back to the default or
>    previous settings or to use a dedicated webkit setting object only for the
>    trusted domain.

I see. Buffers may benefit vimb, by the way. For example, you can keep track 
of all opened links in the current window with last position on every page and
applied settings.

The most efficient way to handle URL switches I've come up with is to check 
whether or not current (sub)domain has changed. If so, then switch settings 
to the default and apply new settings if necessary. I think it's better not 
to reset all settings at once but only those that have been changed in 
previous "buffer". I don't know how much it will affect performance although.

> 2. The domain matching seems to be easy, but on sites that use frames or
>    iframes, this might lead to problems, because we can do the domain matching
>    only for the main frame I think, all iframes and frames will also run with
>    the same privileges like the trusted main page. But this is more a questing
>    for www or origin policies than for vimb I guess.

There is NoScript extension in firefox which can handle such things. In
webkitgtk, as far as I know, this is impossible. So there is nothing we
can do about it.

------------------------------------------------------------------------------
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk
_______________________________________________
vimb-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/vimb-users

Reply via email to