I submitted a bug https://bugzilla.mozilla.org/show_bug.cgi?id=331726
To make it easier for users to change capabilities in mail and news as
separate entities. Since then I have been playing with CAPS policies
inserted via a user.js file to accomplish the same effect. Here's an
example:
user_pref("capability.policy.policynames", "allowjs");
user_pref("capability.policy.allowjs.sites",
"news://secnews.netscape.com news://news.mozilla.org
news://news.leibowitz.org";);
pref("capability.policy.allowjs.IMG.src.get", "allAccess"); ///image
source access by scripts
pref("capability.policy.allowjs.text.data.get", "allAccess"); ///allows
rainbow script to work
pref("capability.policy.allowjs.HTMLDivElement.getAttribute",
"sameOrigin"); ///allows full marquee tag functions
pref("capabilty.policy.allowjs.dom.disable_window_status_change",
false); ///allow ticker
This works fine, only allowing the particular functions for the named
news servers. The results produced in the prefs.js file are:
user_pref("capability.policy.allowjs.sites","news://secnews.netscape.com
news://news.mozilla.org news://news.leibowitz.org";);
user_pref("capability.policy.policynames", "allowjs");
Unfortunately, if the user.js file is removed, the policy stays in
effect. And where are the particulars of the policy stored, I don't see
them anywhere. My point is, if I set a policy, how do I reverse or
modify the policy, short of creating a new profile.
JoeS
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security
