Boris Zbarsky wrote: > Alex Yip wrote: >> Thanks Boris, is the CAPS system being removed? > > Not completely, but if DOM is switched off xpconnect, it will no longer > be making CAPS calls (which will be a big performance benefit). > >> If so, is there a replacement for it? > > Not really, as far as I know.
We should have a separate preference for turning off window.postMessage though, as it's a feature that affects security. If there isn't such a pref already, please file a bug on it and cc me. / Jonas _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
