Group,
For the records, this is my proposal for Widget update (as discussed
on the f2f Tuesday morning):
config.xml includes the domain from where updates are permissible, e.g.
<update domain="nokia.com" />
widget.update (URI) allows a Widget to request the engine to update
itself. The domain used in URI must match the one defined in the
config.xml.
Note: This is the solution how prevent hijacking the update process
of a compromised Widget.
e.g. widget.update (http://www.forum.nokia.com/update.php?widget=myWidget,version=201
)
widget.deinstall () allows a Widget to request permanent
deinstallation from the system.
Kind Regards
- Guido
