Re: Is the security model XBL uses wrong?

[Stuart Ballard]

Stuart Ballard wrote:
> 
> (Consider the XBL-form bindings too - there's
> no reason for them not to be privileged, if necessary).

I just realized that it probably *is* necessary for XBL form bindings to
be privileged: <input type="file"> requires access to privileged
functions to put up a filepicker dialog and also raw filesystem access
to read the resulting file for upload. How do you propose to do *that*
with only the privileges of remote HTML?

Stuart.