There is always the possibility that they could put event handler
listeners on the iframe hosting the application as well... and stop
certain events from happening... but I've never tried something like
that... nor do I really know anything about it... or what a practical
use would be...

http://www.thescripts.com/forum/thread157185.html

On Nov 8, 1:28 am, MrGamma <[EMAIL PROTECTED]> wrote:
> Actually... I take that back... they have to do something about
> security otherwise your going to have social apps potentially de-
> indexing webpages from websites for malware reasons... really... I
> just don't know... Google places restrictions on websites if they find
> bad scripts on them... Some anti-virus programs will stop pages from
> loading within your browser as well... I'm guessing if a container api
> had code for detecting and blocking malware... everyone would have
> access to the api and write different malware since it is Open...
>
> On Nov 8, 1:22 am, MrGamma <[EMAIL PROTECTED]> wrote:
>
> > Hello Toxic,
>
> > JavaScript ( Ajax ) is executed from within the browser window.
> > Technically a container or social network serving the code could not
> > actually stop it from executing once it was loaded into the browser
> > window.
>
> > Since an Ajax call is executed from within the clients browser nothing
> > can stop it...
>
> > A social network which is serving the application could strip snippets
> > of code which it deemed a security risk from the app before it reached
> > the end users browser but this would be considered hack at best and
> > ruin the compatibility of the app itself...there is always the
> > possiblity that they will build security modules into the container
> > api but I really... really... doubt it...
>
> > Here's a social app... I'm not sure if it's hooked into a proper
> > OpenSocial framework but it is advertised as a real SocialGadget...
>
> >http://proxy.ning.com/gadgets/index/gadgetWrapper?xark=16693486867224...
>
> > On Nov 7, 11:03 pm, toxic <[EMAIL PROTECTED]> wrote:
>
> > > Someone should add the "Ajax" feature in the opensocial request page.
> > >  I am not adding it there due to my limited knowledge about the
> > > subject.
> > > I mean , is it an ajax feature or is it something Open Social is
> > > disallowing....


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OpenSocial Developers" group.
To post to this group, send email to opensocial-api@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/opensocial-api?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to