Closed Bug 595260 Opened 14 years ago Closed 14 years ago

Extension for whitelisting remote XUL on sites

Categories

(Core :: XUL, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: dwitte, Assigned: jorgev)

References

Details

(Keywords: dev-doc-complete)

We should have an extension to add permmgr exceptions for loading of remote XUL from sites. This is trivial to do (and there are lots of examples in our codebase). Volunteers appreciated!

(This should be dev-doc-needed once we have the extension.)

Core:XUL isn't exactly a great place for this, but I don't know that we have a component for writing extensions.
Adding doc needed flag now; it won't show up in my "stuff to write" list until this bug gets marked as fixed anyway. I only see stuff that's both doc needed and resolved.
Actually, why not make the extension a generic "modify what's in permissions manager"? Similar to about:config for prefs.
And whaddaya know -- we have one! https://addons.mozilla.org/en-US/firefox/addon/7385/

I love our community.

It needs to be updated for 4, and tweaked to include remote XUL. (And perhaps to allow a custom consumer string for the truly daring.)
The Permissions tab in Page Info already allows to set permissions for the current site for load images, open pop-ups, set cookies, install add-ons, share location, and maintain offline storage.

I guess I could write a patch to add another toggle. The question is whether that would be accepted for Firefox proper?
Keywords: dev-doc-needed
I don't think so. This shouldn't really be user-facing. We should update the existing extension, or write a separate one.

I'll contact the author and see if he's willing to update his...
I've created a new extension specifically aimed at managing Remote XUL permissions: https://addons.mozilla.org/en-US/firefox/addon/235281/. It's very simple at the moment but I'm planning on adding more features in the near future.
Nice! Can we close this out, then?
Looked at the docs and tested the extension; they look good to me, so I think we can close this out. Requests for additional features can be filed separately.
Assignee: nobody → jorge
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Yay, Jorge!

/be
You need to log in before you can comment on or make changes to this bug.