Open Bug 294381 Opened 20 years ago Updated 2 years ago

Need better CanExecuteScripts() api

Categories

(Core :: Security: CAPS, defect)

Product:
Core
Component:
Security: CAPS
Platform:
x86
Linux
Type:
defect

Tracking

()

People

(Reporter: bzbarsky, Assigned: dveditz)

Details

Right now, to use CanExecuteScripts() you need a principal and a JSContext. 
There is no clear indication what the JSContext is needed for, and not passing
one opens up security holes (since the method doesn't fail-safe).  We should
probably have a clearer indication in the comments of what the JSContext is
there for, and possibly take an nsIDOMWindow or something instead of a JSContext...
QA Contact: caps
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.