We should have an extension to add permmgr exceptions for loading of remote XUL from sites. This is trivial to do (and there are lots of examples in our codebase). Volunteers appreciated! (This should be dev-doc-needed once we have the extension.) Core:XUL isn't exactly a great place for this, but I don't know that we have a component for writing extensions.
Adding doc needed flag now; it won't show up in my "stuff to write" list until this bug gets marked as fixed anyway. I only see stuff that's both doc needed and resolved.
Actually, why not make the extension a generic "modify what's in permissions manager"? Similar to about:config for prefs.
And whaddaya know -- we have one! https://addons.mozilla.org/en-US/firefox/addon/7385/ I love our community. It needs to be updated for 4, and tweaked to include remote XUL. (And perhaps to allow a custom consumer string for the truly daring.)
The Permissions tab in Page Info already allows to set permissions for the current site for load images, open pop-ups, set cookies, install add-ons, share location, and maintain offline storage. I guess I could write a patch to add another toggle. The question is whether that would be accepted for Firefox proper?
I don't think so. This shouldn't really be user-facing. We should update the existing extension, or write a separate one. I'll contact the author and see if he's willing to update his...
I've created a new extension specifically aimed at managing Remote XUL permissions: https://addons.mozilla.org/en-US/firefox/addon/235281/. It's very simple at the moment but I'm planning on adding more features in the near future.
Nice! Can we close this out, then?
This is linked to from: https://developer.mozilla.org/en/Remote_XUL and https://developer.mozilla.org/en/Using_Remote_XUL And from Fx4 for developers
Yay! Thanks Jorge!
Looked at the docs and tested the extension; they look good to me, so I think we can close this out. Requests for additional features can be filed separately.
Yay, Jorge! /be