On 3/18/13 12:14 PM, [email protected] wrote:
1.) Do I have to use shouldProcess() to check inline scripts?
In theory, yes. In practice, it may not get called for inline scripts.
2.) For what types is shouldProcess() used after all? Same as shouldLoad()?
While shouldLoad() is quite clear I didn't fully understand the meaning of
shouldProcess().
You're not the only one. ;)
In theory, anything that gets "processed" should call shouldProcess
before doing so... That would tend to include most things that go
through shouldLoad, but perhaps not all (e.g. clicking a link would do a
shouldLoad(), but if it comes back content-disposition:attachment
arguably shouldn't shouldProcess).
-Boris
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
