131850 - Privilege Manager Does not Obey UniversalXPConnect

Status: VERIFIED INVALID

(Core :: XPConnect, defect)

Description

[mk]

Trying to use the privilege manager to allow UniversalXPConnect does not give a
script permissions to make an nsIHTMLEditor component.  This severly limits the
embedability of the editor component and leaves IE in the lead with it's
HTMLArea component.  A privileged script should be able to manipulate an editor
component.

Steps to Reproduce
Create a XUL file with an <editor> component.
Include some JavaScript and call a function in the onLoad of the XUL window.
In that function, register a new documentStateListener
In documentStateListener::NotifyDocumentCreated(), 
    var htmlEditor =
    editorElement.editorShell.QueryInterface
    (Components.interfaces.nsIHTMLEditor);

Results in 'Permission denied to create wrapper for object'

Comment 1

[Phil Schwartau]

mk: could you make a reduced testcase and attach it to this bug 
via the "Create a New Attachment" link above? That will speed things
along; thanks -

Comment 2

[mk]

Arg, so sorry.  This is not a bug.  I was unaware that 
netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");
was limited to function scope.  Recomend resloving to INVALID.

Comment 3

[David Bradley]

Marking INVALID per reporter's comment

Thanks for reporting back.

Comment 4

[Phil Schwartau]

Marking Verified -