On 10 Dez., 17:03, Adrienne Porter Felt <a...@berkeley.edu> wrote: > On Fri, Dec 10, 2010 at 7:44 AM, Boris Zbarsky <bzbar...@mit.edu> wrote: > > On 12/10/10 3:59 AM, thorsten wrote: > > >> My extension will also have to look for text entries with > >> javescript keypress event listeners..... > > > And keydown. And keyup. And the listeners could be anywhere on the parent > > chain. Or there could be no listeners; just a repeating 10ms timer running > > that polls the value in the textfield... > > And forms in Flash... which the DOM can't handle at all.
Wow. Good point. OK. If sending page contains ((password fields || (text entries && javascript) || (flash)) && (http has post or get-data)) { check local information, then ask the cloud, then annoy the user } ... anything else ? Thanks a lot ! Thorsten _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security