On Wed, Feb 15, 2012 at 3:19 AM, Ryan Lane <rlan...@gmail.com> wrote:
>> 3. jQuery drop down menu - I wanted to implement this functionality on
>> every page. I had seen the SignUP API & wanted this universally. If there
>> are security issues with AJAX, then there is no need to even implement the
>> jQuery alongside. (Idea dropped)
>>
>
> Well, just because it would be insecure the way the Wikimedia sites
> are configured doesn't mean it isn't useful for others. Any site that
> is either 100% http or 100% https could use this.
>
> - Ryan

The security issues I was referring to (And Dantman kinda pointed were
slightly non issues) was any JS can be run on those pages (so people
could do things to the login forms) where as on the separate login
page, We are a lot more restrictive about what JS can be run thus
slightly mitigating that risk.

_______________________________________________
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to