Re: Pages served from a secure server will fail same-origin checks

2005-05-06 Thread Daniel Veditz
Alfred Amazon wrote: According to the "Client-side Javascript Guide" under SSL Servers and Unsigned Scripts An alternative to using the Netscape Signing Tool to sign your scripts is to serve them from a secure server. Navigator treats all pages served from an SSL server as if they were signed with

Re: Is it possible to sign dynamically generated Javascript?

2005-05-06 Thread Daniel Veditz
Alfred Amazon wrote: According to http://www.mozilla.org/projects/security/components/jssec.html "To ensure security, the basic assumption of the JavaScript signed script security model is that mixed scripts on an HTML page operate as if they were all signed by the intersection of the principals th

Re: Allow/Disallow Java applets per site

2005-05-06 Thread Daniel Veditz
Jean-Marc Desperrier wrote: Fabrizio Marana wrote: It's just that in the last week I've been infected twice with the Java/ByteVerify Trojan/virus... No, you have not been infected. You accessed a page that contained this IE only trojan, the trojan got stored in the disk cache, so your anti-virus