Scrollbar widget in content panel (overflow: scroll) has no XPConnect privileges

NEW
Assigned to

Status

()

Core
Security: CAPS
10 years ago
10 years ago

People

(Reporter: WeirdAl, Assigned: dveditz)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

10 years ago
Today, when working on a nsIScriptableScroller interface, I tried adding something like this to toolkit/content/widgets/scrollbar.xml:

this.parentNode.scroller = Components.classes[scrollerClass].createInstance(nsIScriptableScroller);

When I tried executing this, the script security manager vetoed, saying:
JavaScript error: , line 0: uncaught exception: Permission denied to get property XPCComponents.classes

I'm not entirely sure this is wrong from a security standpoint, but it would be nice to grant additional privileges to content the user cannot reach by script.
You need to log in before you can comment on or make changes to this bug.