Manuel Reimer wrote:
> It seems to be chrome:xpcNativeWrappers="true"

Indeed, so it does.

> May I trust the automatic wrappers or 
> should I still create a wrapper manually where I access untrusted content?

I think trusting the automatic wrappers, once enabled, is reasonable.

> In my opinion a short note about
> 
> chrome:xpcNativeWrappers="true"
> 
> in SeaMonkey 1.1.x is required!

Hmm.  Perhaps in the "What is a protected script?" section?

-Boris
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to