[Typo3-dev] Information request about signed scripts

Martin T. Kutschker Martin-no5pam-Kutschker at blackbox.n0spam.net
Fri Feb 4 01:00:46 CET 2005



Dan Jensen wrote:
>>The point is that Firefox' and Mozillas security model prohibit unsigned
>>access to the clipboard (and other local resources).
>>
>>To overcome this problem the script has either to be signed or the user
>>must lower manually the security settings. It is possible to allow
>>scripts from certain sites to gain access to local resources. To do this
>>the file user.js in the profile must be changed. This is awkward and
>>obviously meant only for developing.
> 
>  
> I know that - thats why I thought it might be possible to make an firefox
> extension that does the manual lowering of the security settings?

If you could make one then it would be a major security hole. It's like 
installing an app that disables your software firewall. I'm glad that 
there is no such extension.

Masi







More information about the TYPO3-dev mailing list