Re: http referer over https connections

2002-04-14 Thread Christian Biesinger
Mitchell Stoltz wrote: In general, you shouldn't write applications that depend on referrer headers, because user agents can always opt not to send them. ...or even send faked ones, so a referer is no real protection. -- They that can give up essential liberty to obtain a little temporary

window.opendialog security

2002-04-14 Thread rvj
If a xul fiile is open via the file protocol should it be able to create windows using window.openDialog ? If this is a security precaution then what is it supposed to be protecting? function opendialog() { var x= window.openDialog( clone.xul, name,chrome ); }