Alex,

So how do I access XPCOM drag and drop from a remote site, or is this
not possible at all?

If that is the case what are other options to implement drag and drop
from a remote site?

You can do this in W3C DHTML very nicely (see www.brainjar.com), but
then I lose XUL's rich widget set. All this power and you can't use it
remotely arrgh!

Cheers,
Nick

Axel Hecht <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>...
> > However, you cannot call the clipboard or drag and drop convenience
> > scripts in the global directory from a remote site.
> 
> This still holds, even if you do a enablePrivilidge in the calling 
> function. Those just work for the current context, not for child 
> contexts, sadly.
> 
> Axel
> 
> Nick Taylor wrote:
> 
> > Well that error message doesn't give a line number, but I can tell
> > you that it occurs as soon the event ondraggesture of any of the
> > buttons in the dragdrop.xul. That error message though is a security
> > issue. I've read about it on XULPlanet.com see 
> > http://xulplanet.com/tutorials/xulqa/q_pdenyucc.html. I know for sure
> >  that it's a security issue.
> > 
> > I know that's not much to give you to go on. As I mentioned before, 
> > the dragdrop.xul works fine when it's a chrome app. It's only when 
> > it's run remotely.
> > 
> > I'm only testing an app right now, but I wasn't running it as a
> > chrome before because it has an applet and I was getting java errors
> > about a malformed url due to chrome:// . After some reading I found
> > out that all I need to do is put the applet in HTML into an iframe in
> > the XUL file. Now everything is running fine in the chrome for
> > testing purposes, but eventually once it's deployed it will have to
> > run remotely so security is still a problem.
> > 
> > Thanks for any help, Nick
> > 
> > On Wed, 07 Jan 2004 18:53:19 +0100, Axel Hecht <[EMAIL PROTECTED]> wrote:
> > 
> > 
> > 
> >> Nick wrote:
> >> 
> >>> My PC Setup: - Win2K Server SP4 w/ Certificates Authority enabled
> >>>  -Netscape 7.1
> >>> 
> >>> When run locally as a Chrome app: I have already tested a drag
> >>> drop XUL app from the Netscape Chrome dir and it works fine. (See
> >>> code below)
> >>> 
> >>> When run remotely: -I am now running it from a secure server,
> >>> i.e. https://, so it is signed. -The certificates from the site
> >>> are valid and were accepted so the site is trusted. I have
> >>> verified this in the preferences under "Manage Certificates" -I'm
> >>> prompted from my XUL app to enable enhanced privileges for 
> >>> UniversalXPConnect. -I say "yes" to the prompt and check it as
> >>> well so as not to be asked again. -I try dragging a widget and I
> >>> get the famous security error "Error: uncaught exception:
> >>> Permission denied to get property UnnamedClass.classes"
> >>> 
> >> 
> >> <...>
> >> 
> >> Shouldn't that give a line number? It'd be way easier to follow
> >> your problem if we knew where.
> >> 
> >> Axel
> > 
> >
_______________________________________________
Mozilla-security mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to