On Fri, Jan 23, 2009 at 9:53 PM, Denise Paolucci <[email protected]>wrote:
>
> On Jan 23, 2009, at 4:48 PM, Carol Stoneburner wrote:
>
> > Are there plans permit/support flash widgets
>
>
> It'd be very nice to be able to add widgets, yeah. The problem with
> that is that you have to design it very carefully, because allowing
> Flash and Javascript can lead to significant security holes, which
> would be Bad.
>
> The solution's probably going to be to add specific widgets to a
> whitelist -- build a system of "approved"/safe widgets that we pre-
> screen and vet, let people configure them with their usernames/
> userIDs/what-have-you, and add them that way.
>
> --D
What about some sort of internal firewalling between the widgets and our
code? Kind of a 'rabbit garden' approach as well...
like a plug-in that talks between the two and incorporates security. Apart
from anything else, the number of times a year java and flash get updated,
that would have to make it easier...
Feel free to ignore this though, last time I did any real programming I was
using a Sinclair ZX-81.
--
Silicon.shaman
Cogito ergo periculosus.
[ I think, therefore I'm dangerous ].
_______________________________________________
dw-discuss mailing list
[email protected]
http://lists.dwscoalition.org/cgi-bin/mailman/listinfo/dw-discuss
