Re: Epiphany extensions, what to do next

[Gustavo Noronha <gns gnome org>]

On Thu, 2009-03-19 at 16:42 -0600, Michael Torrie wrote:
> Gustavo Noronha wrote:
> > I've discussed with racarr about enabling Seed to attach to the
> > javascript context of webkit itself, which would enable us to make
> > arbitrary GObjects available as javascript objects for the page to use,
> > and use the javascript objects available in a page in extensions. I am
> > not sure this counts as a pro for this specific problem, though, since I
> > am not really familiar with how current extensions are limited.
> 
> This sounds rather risky to me, a security nightmare actually.  Unless
> you had a bunch of proxy objects that could act as security brokers, I
> wouldn't want page javascript interacting at all with Epiphany's
> internal gobjects.

Yep. The fact that you can do it doesn't mean you'll do it it for every
page you load, or that you will do it at all. It should be used with
care.

See you,

-- 
Gustavo Noronha <gns gnome org>
GNOME contributor