Plugin Security (Was Re: How do I create a SqueakPlugin.imagefrom
a 2.9a ?)
Bert Freudenberg
bert at isg.cs.uni-magdeburg.de
Wed Jan 24 08:16:03 UTC 2001
On Tue, 23 Jan 2001, John M McIntosh wrote:
> >You completely disallow it? How about only disallowing it when the
> >original squeaklet was not a "file:"-URL?
>
> We disallow the ability for a Smalltalk application to use the
> browser interface to parse a file: URL. There is a interface in the
> Smalltalk code that lets you give a URL to the browser and fetch back
> the stream of data, or post a stream of data to the supplied URL.
I know, I implemented that stuff for Unix ;-)
My point is, when I locally test my plugin I may want to use "file:" URLs.
OTOH, it may well work when I use relative URLs only ... I'll put
disabling file: URLs onto my "to do" list, then. Do you fail silently or
display a notifier?
-- Bert
More information about the Squeak-dev
mailing list
|