874
edits
m (→Extenders: minor rewording) |
(→Dependency Injection: added implementation notes) |
||
| Line 44: | Line 44: | ||
Alternatively, if the manifest specifies that the Jetpack only needs to communicate with foo.com, then <tt>XMLHttpRequest</tt> will be injected but attenuated such that connections to domains other than foo.com will fail. | Alternatively, if the manifest specifies that the Jetpack only needs to communicate with foo.com, then <tt>XMLHttpRequest</tt> will be injected but attenuated such that connections to domains other than foo.com will fail. | ||
'''Implementation Notes''' | |||
Injected functionality will be protected by [[XPConnect_Chrome_Object_Wrappers|Chrome Object Wrappers]]. These secure membranes ensure the injection can't lead to privilege escalation. | |||
=== Libraries === | === Libraries === | ||
edits