Re: Does it ever make sense that a web page can have chrome privs?

2010-02-23 Thread Daniel Veditz
On 2/23/10 6:15 PM, Boris Zbarsky wrote: > On 2/23/10 8:14 PM, Natch wrote: >> I was thinking (in bug 491243) that channels shouldn't inherit chrome >> privileges ever unless they are data, javascript or chrome channels >> (or that sort). > > That's already the case. The documents can end up priv

Re: Does it ever make sense that a web page can have chrome privs?

2010-02-23 Thread Boris Zbarsky
On 2/23/10 8:14 PM, Natch wrote: I was thinking (in bug 491243) that channels shouldn't inherit chrome privileges ever unless they are data, javascript or chrome channels (or that sort). That's already the case. For example, it is possible for any web site to run in an elevated context(and do

Does it ever make sense that a web page can have chrome privs?

2010-02-23 Thread Natch
I was thinking (in bug 491243) that channels shouldn't inherit chrome privileges ever unless they are data, javascript or chrome channels (or that sort). For example, it is possible for any web site to run in an elevated context(and do practically anything to the user's computer) if you type the f