However, you cannot call the clipboard or drag and drop convenience scripts in the global directory from a remote site.
This still holds, even if you do a enablePrivilidge in the calling function. Those just work for the current context, not for child contexts, sadly.
Axel
Nick Taylor wrote:
Well that error message doesn't give a line number, but I can tell
you that it occurs as soon the event ondraggesture of any of the
buttons in the dragdrop.xul. That error message though is a security
issue. I've read about it on XULPlanet.com see http://xulplanet.com/tutorials/xulqa/q_pdenyucc.html. I know for sure
that it's a security issue.
I know that's not much to give you to go on. As I mentioned before, the dragdrop.xul works fine when it's a chrome app. It's only when it's run remotely.
I'm only testing an app right now, but I wasn't running it as a chrome before because it has an applet and I was getting java errors about a malformed url due to chrome:// . After some reading I found out that all I need to do is put the applet in HTML into an iframe in the XUL file. Now everything is running fine in the chrome for testing purposes, but eventually once it's deployed it will have to run remotely so security is still a problem.
Thanks for any help, Nick
On Wed, 07 Jan 2004 18:53:19 +0100, Axel Hecht <[EMAIL PROTECTED]> wrote:
Nick wrote:
My PC Setup: - Win2K Server SP4 w/ Certificates Authority enabled -Netscape 7.1
When run locally as a Chrome app: I have already tested a drag drop XUL app from the Netscape Chrome dir and it works fine. (See code below)
When run remotely: -I am now running it from a secure server,
i.e. https://, so it is signed. -The certificates from the site
are valid and were accepted so the site is trusted. I have
verified this in the preferences under "Manage Certificates" -I'm
prompted from my XUL app to enable enhanced privileges for UniversalXPConnect. -I say "yes" to the prompt and check it as
well so as not to be asked again. -I try dragging a widget and I
get the famous security error "Error: uncaught exception:
Permission denied to get property UnnamedClass.classes"
<...>
Shouldn't that give a line number? It'd be way easier to follow your problem if we knew where.
Axel
_______________________________________________ Mozilla-security mailing list [EMAIL PROTECTED] http://mail.mozilla.org/listinfo/mozilla-security
