Open Bug 825588 (jsdownloads) Opened 11 years ago Updated 9 months ago

[meta] Asynchronous JavaScript API for downloads

Categories

(Toolkit :: Downloads API, enhancement)

enhancement

Tracking

()

People

(Reporter: Paolo, Unassigned)

References

(Depends on 13 open bugs, Blocks 1 open bug, )

Details

(Keywords: meta)

This meta-bug tracks the implementation of an asynchronous JavaScript API for
downloads, according to the draft specification linked by this bug's URL field.
Depends on: 825591
Depends on: 831708
Depends on: 835803
Depends on: 835872
Depends on: 835875
Depends on: 835876
Depends on: 835880
Depends on: 835885
Depends on: 836437
Depends on: 836439
Depends on: 836443
Depends on: 836445
Depends on: 836481
Depends on: 836483
Depends on: 836485
Depends on: 836487
Depends on: 841348
Depends on: 847184
Depends on: 847191
Blocks: 847863
Depends on: 851454
Depends on: 851461
Depends on: 851466
Depends on: 851471
Depends on: 852478
Depends on: 852482
Depends on: 852581
Depends on: 852596
Depends on: 852599
Depends on: 852603
Depends on: 852868
Depends on: 852957
Depends on: 852964
Depends on: 853901
Whiteboard: [Async]
Depends on: 865364
Depends on: 874808
Depends on: 875648
Depends on: 875654
Depends on: 875731
Depends on: 881058
Depends on: 881062
No longer blocks: 847863
Depends on: 847863
Depends on: 852596
Depends on: 852603
Blocks: 888915
Blocks: 890702
Depends on: 899013
Depends on: 899102
How will users do downloads if they have been advised to disable JavaScript because of a security vulnerability?  It might be necessary to download a patch or new version of a Mozilla application to eliminate that vulnerability.
(In reply to David E. Ross from comment #2)
> How will users do downloads if they have been advised to disable JavaScript
> because of a security vulnerability?  It might be necessary to download a
> patch or new version of a Mozilla application to eliminate that
> vulnerability.

This has nothing to do with JavaScript on websites, this is about JavaScript as used by the user interface. Firefox, Thunderbird and SeaMonkey UI is based on XUL and JavaScript, you can't turn it off there anyhow. And websites don't have access to this API.
Depends on: 905123
Depends on: 905508
Blocks: 906042
Depends on: 906134
Depends on: 906620
Depends on: 907047
Depends on: 907062
Depends on: 907082
No longer depends on: 906620
No longer depends on: 906139
No longer depends on: 899102
No longer depends on: 852596
No longer depends on: 852603
No longer blocks: 906042
No longer blocks: 888915
Depends on: 907764
Depends on: 908260
Flags: sec-review?(mgoodwin)
Depends on: 908448
Depends on: 911474
No longer depends on: 906134
Depends on: 915036
Depends on: 588314
Depends on: 915214
Depends on: 901017
Depends on: 916433
Depends on: 917217
Depends on: 918188
Depends on: 919100
Depends on: 921052
Depends on: 921054
Depends on: 924091
Depends on: 851774
Depends on: 928947
Depends on: 928972
Depends on: 929067
Depends on: 929391
Blocks: 732924
Depends on: 941009
Depends on: 941063
Depends on: 937740
Depends on: 941317
Whiteboard: [Async]
Depends on: 1009465
Depends on: 1094208
No longer depends on: 1094208
Depends on: 1113736
Depends on: 1163424
Depends on: 1254100
Depends on: 1258192
Depends on: 1265328
Depends on: 1265329
Depends on: 1265334
Depends on: 1265391
(In reply to Robert Kaiser (don't count on reactions on anything) from comment #3)
> 
> This has nothing to do with JavaScript on websites, this is about JavaScript
> as used by the user interface. Firefox, Thunderbird and SeaMonkey UI is
> based on XUL and JavaScript, you can't turn it off there anyhow. And
> websites don't have access to this API.

Today, I encountered an extension that is compatible with Firefox, Thunderbird, and SeaMonkey.  That extension uses JavaScript.  If a user disables JavaScript, that extension is broken.  Can extensions use the API to avoid that problem?  If so, how is that documented for extension developers?  

Yes, this is likely off-topic.  However, this seems to be the only venue where this question can be asked of knowledgeable persons.
Flags: sec-review?(mgoodwin)
Depends on: 1265356
Depends on: 1362384
Depends on: 1387446
Summary: Asynchronous JavaScript API for downloads → [meta] Asynchronous JavaScript API for downloads
Type: defect → enhancement
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.