397845 - Should register(Protocol|Content)Handler enforce cross-domain policies?

Status: RESOLVED DUPLICATE of bug 402287

(Firefox :: File Handling, defect)

Description

[Ryan Flint [:rflint] (ping via IRC for reviews)]

Currently we allow pages to register handlers for domains other than their own (e.g. http://people.mozilla.org/~ctalbert/test-mailto-gmail.html). The language of the specification seems to be leaning towards only allowing pages to register handlers for the current domain, but only explicitly covers the case disallowing a single domain from registering multiple handlers for the same type/protocol.
The current UI does display the domain to be registered in the body of the message (and is neither modal nor intrusive), so perhaps we're already fine.

Any thoughts on this Ian?

Comment 1

[Hixie (not reading bugmail)]

No, not really. I don't think we collectively have enough experience to really know what the right answers are with this API. We should do what we think is best and then carefully follow what happens with it and redesign its security model and maybe even the API itself once we know what we're doing. :-)