Hello, I have an XUL (intranet) application running from chrome and I would like to have a (athena) livepage in an (XUL) iframe. Not a problem you would say ... but those damn privileges prevent me from reaching the chrome from the livepage. A way to circumvent the privileges horror, is to load the remote html (via xmlhttpRequests) into for example a div on a (x)html page loaded from chrome. That works with simple pages (and scripts) ... but would it also work with a livepage and how should I tackle this problem? BTW: if anyone knows a method to enable all privileges for remote XUL (without bothering the user with dialogs asking for permission etc.) ... please let me know :-D Thanks... - Remi -
On Thu, 22 Jun 2006 09:50:44 +0200, Remi Cool
BTW: if anyone knows a method to enable all privileges for remote XUL (without bothering the user with dialogs asking for permission etc.) ... please let me know :-D
If this is an intranet application, you can hopefully get the sysadmin to install the appropriate signatures on everyone's firefox. Otherwise, I'd start auditing the XML parser and network stack in mozilla for buffer overflows :)
glyph@divmod.com wrote:
On Thu, 22 Jun 2006 09:50:44 +0200, Remi Cool
wrote: BTW: if anyone knows a method to enable all privileges for remote XUL (without bothering the user with dialogs asking for permission etc.) ... please let me know :-D
If this is an intranet application, you can hopefully get the sysadmin to install the appropriate signatures on everyone's firefox.
Otherwise, I'd start auditing the XML parser and network stack in mozilla for buffer overflows :)
The client is based on xulrunner (gecko 1.8), not Firefox. But I do think I have the solution for the livepage ... I fetch the page from the server using an xmlhttpRequest and store the result as a XML dom object. Then the javascripts from the head are processed into the receiving chrome html page. I now need to copy the body content ... but that should not be so hard. In theory, the livepage should work. I hope :)
participants (2)
-
glyph@divmod.com
-
Remi Cool