Hi,

Please, excuse me if I'm asking something yet solved/answered. I did
searched and tried several solutions but I'm not getting the expected
result. 

I'm working on a BEEP [1] implementation for Firefox: jsVortex [2]. For
now, I've been using signed.applets.codebase_principal_support to get
access to the API that allows to create sockets, read and write, and to
close them. 

However, as you known, having signed.applets.codebase_principal_support
enabled, makes not only your webapp but other, unknown, webapps that may
ask user permission to access not only to the socket API but everything.

In this context I've tried to find a firefox addon that would allow a
kind of per-site signed.applets.codebase_principal_support, that is, the
site using jsVortex still requires asking permission to the user, but
this is already known by the user, and at the same time other sites
can't ask for permissions (like having
signed.applets.codebase_principal_support = false). However it seems
there is nothing similar.

The other approach I've tried is to create a firefox extension, sign the
XPI package and then load all .js files via chrome:/// url but it makes
no difference. It still requires
signed.applets.codebase_principal_support to be enabled.

This approach also have the chrome:/// problem which is firefox
specific. 

Reached this point, I'm asking for any clue or guidance. Any help will
be really appreciated ;-)

1. Is there a way to allow a user to configure its browser to accept a
list of "trusted" sites that are allowed to use UniversalXPConnect?

2. Do you think there are another way to accomplish what I'm trying? 

[1] http://www.beepcore.org
[2] https://dolphin.aspl.es/svn/publico/af-arch/trunk/jsVortex/

-- 
Francis Brosnan Blazquez <[email protected]>
ASPL

_______________________________________________
dev-tech-network mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-network

Reply via email to