[EMAIL PROTECTED] wrote:
> capabilities.policy.<policy name>.ClassID.<classID Value> source:
> http://mxr.mozilla.org/firefox2/source/caps/src/nsScriptSecurityManager.cpp#2870
> (I'm going to guess this can be used to kill things with a GUID-like
> number (IID? UUID?), most likely XPCOM components)

Actually, this looks like it's only used for ActiveX IDispatch stuff 
(which iirc is off by default).

> capabilities.policy.<policy name>.<class name>.<property name> (here
> is what powers the set policy on any element thing) source:
> http://mxr.mozilla.org/firefox2/source/caps/src/nsScriptSecurityManager.cpp#671

Note that this will more or less stop working in Gecko 1.9.1.

> I am not a C++ or Mozilla insides programmer. But this is my
> understanding after a couple difficult hours of reading source code. I
> guarantee you there are mistakes in this post. This would belong on
> the talk page of the configPolicy.html page if it were on Mozilla
> Developer Center or Mozilla Wiki.

It should probably be migrated.

-Boris
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to