Plugin Security (Was Re: How do I create a SqueakPlugin.imagefrom a 2.9a ?)

Bert Freudenberg bert at isg.cs.uni-magdeburg.de
Wed Jan 24 08:16:03 UTC 2001


On Tue, 23 Jan 2001, John M McIntosh wrote:

> >You completely disallow it? How about only disallowing it when the
> >original squeaklet was not a "file:"-URL?
> 
> We disallow the ability for a Smalltalk application to use the 
> browser interface to parse a file: URL. There is a interface in the 
> Smalltalk code that lets you give a URL to the browser and fetch back 
> the stream of data, or post a stream of data to the supplied URL.

I know, I implemented that stuff for Unix ;-)

My point is, when I locally test my plugin I may want to use "file:" URLs.
OTOH, it may well work when I use relative URLs only ... I'll put
disabling file: URLs onto my "to do" list, then. Do you fail silently or
display a notifier?

-- Bert





More information about the Squeak-dev mailing list