On 10 Dez., 17:03, Adrienne Porter Felt <[email protected]> wrote:
> On Fri, Dec 10, 2010 at 7:44 AM, Boris Zbarsky <[email protected]> wrote:
> > On 12/10/10 3:59 AM, thorsten wrote:
>
> >> My extension will also have to look for text entries with
> >> javescript keypress event listeners.....
>
> > And keydown. And keyup. And the listeners could be anywhere on the parent
> > chain. Or there could be no listeners; just a repeating 10ms timer running
> > that polls the value in the textfield...
>
> And forms in Flash... which the DOM can't handle at all.
Wow. Good point. OK. If sending page contains
((password fields || (text entries && javascript) || (flash))
&&
(http has post or get-data))
{
check local information, then ask the cloud, then annoy the user
}
... anything else ?
Thanks a lot !
Thorsten
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
