508388 - "Allow XForms to access other domains" checkbox missing in OS X version of Firefox

Status: RESOLVED WONTFIX

(Core Graveyard :: XForms, defect)

Description

[C. M. Sperberg-McQueen]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9.0.13) Gecko/2009073021 Firefox/3.0.13
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9.0.13) Gecko/2009073021 Firefox/3.0.13

Various XForms tutorials on the Web mention, in discussing
some of the examples they give, that to make the example
work the user must list a given site as trusted.  For example,
at http://en.wikibooks.org/wiki/XForms/Suggesting_Items
the text says in part

    NOTE: To get this program to run you will first have to 
    add our server to the XForms "Trusted Sites" list.

    To do this in FireFox, go to your Tools/Options/Security 
    menu and add www.cems.uwe.ac.uk and googlecode.com to 
    your allowed sites list. This allows the form (loaded 
    from the googlecode domain) to pull data from the 
    server at www.cems.uwe.ac.uk. 

Similarly, section 12 of the version 8.4 Release Notes 
http://www.mozilla.org/projects/xforms/ReleaseNotes-v8.4.html#c12
describes the same procedure.

In my Firefox (now 3.0.13 for OS X 10.5.7, upgraded just now 
from whatever 3.0.x it was before that), the Security
pane of the Preferences dialog (not called Options and
not reachable from Tools, but still clearly the right
place) shows no sign of any facility for stipulating that
particular sites are trusted in this way.

I checked with a reasonably current Windows copy of Firefox
to see if this was a peculiarity of Firefox for OS X, or 
if perhaps or has the entire trusted-site mechanism had 
been taken away as a security hole; 3.0.8 on Windows does
show an option to allow XForms to perform cross-domain
submissions for an enumerated set of domains.  So I infer
that the absence of the option in the OS X version is a bug.


Reproducible: Always

Steps to Reproduce:
1.  Launch Firefox under OS X.
2.  Install XForms extension.
3.  Open the menu Firefox/Preferences/Security
4.  Observe that the option to allow XForms to access other domains is not there.
Actual Results:  
No facility to allow XForms to access other domains is visible.

Expected Results:  
I expected some facility for allowing XForms to access other domains to be visible, as described in the Release Notes.

Comment 1

[aaronr]

I see this, too.

Comment 2

[David Bolter [:davidb] (NeedInfo me for attention)]

RIP xforms