[chromium-dev] Re: Missing security feature

2008-09-16 Thread gbob
You're saying I should use Firefox? The point is that the pop-up blocker works only for JavaScript windows and NOT any other type of window (e.g. - shockwave) able to be put up by JavaScript, that I can demonstrate. These can come from other sites and can be spoofed as safe. The point is to

[chromium-dev] Re: Missing security feature

2008-09-16 Thread gbob
Okay, I must agree with you, okay? However, don't you think that the pop-up blocker has to work against all pop-ups? I have seen the fakeAV2008 and others get through this way. On Sep 16, 1:36 pm, Ian Fette [EMAIL PROTECTED] wrote: The whole point though is that running or not running script

[chromium-dev] Re: Missing security feature

2008-09-16 Thread Ian Fette
Sadly, it's hard to block flash popups without breaking flash. I wish there were a better answer. Some people have requested things like noflash, I suspect that once we have an extension mechanism in place this would be a good candidate for that. On Tue, Sep 16, 2008 at 2:01 PM, gbob [EMAIL

[chromium-dev] Re: Missing security feature

2008-09-16 Thread gbob
So, you allow scripts from sites you determine known to not distribute malware AND the other (cross) sites that site uses for its flash content? On Sep 16, 2:11 pm, Ian Fette [EMAIL PROTECTED] wrote: Sadly, it's hard to block flash popups without breaking flash. I wish there were a better

[chromium-dev] Re: Missing security feature

2008-09-15 Thread gbob
Allowing the user to set the browser security to allow them to set it to ask for permission to run any scripts (Java, Javascript, etc.) and to have a trusted sites list similar to the way IE works. On Sep 15, 7:29 pm, Ian Fette [EMAIL PROTECTED] wrote: I'm not sure what the ask here is. We