Hey Shawn, 

> Congratulations on getting hitched. ;)

Thanks! We had a blast.

> > 1) It won't work properly with XmlHttp
> > 2) The help window still shows an InfoBar on launch,
> >    since it's a new IE instance where our custom
> >    security settings don't hold
> 
> We can fix [1] by instantiating the xmlhttp object using a 
> custom caller of the dqsdhost. This would also minimize 
> external security since only one instance can run at a time 
> and that would be under the DQSD toolbar.

What do you mean by a custom caller? A separate object that is only used to
launch a fresh XmlHttp object without IE getting in the way? I've been
experimenting with things like that, but an unfortunate CVS Merge blew my
local source tree, so I don't know what I ended up with :-/

I suspect that when the webbrowser gets a hold of the XmlHttp object, it
will enforce its security rules, regardless of whether the object was
created from script or not. But I'm not sure, it's worth looking into.

> [2] might be better resolved by using our own frameless "mini-browser"
> the same way the google toolbar does (using the native IE component).

Yep, I've been playing with this too, I think there's even code in CVS for
it. Ah, there it is; the WindowLauncher is a lame attempt at popping up a
window hosting the webbrowser and open an URL in it. We could do something
like it to build a nicer-looking window.

> And this, 
> too, could be done with the same mechanism as the xmlhttp 
> instantiation, making it possible to minimize or prevent 
> external access to our objects.

It sounds like you have something 'automatic' in mind that just solves the
security issues here? Can you explain that a little bit more?

Thanks,
- Kim



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Archive: https://lists.sourceforge.net/lists/listinfo/dqsd-devel

Reply via email to