Labs/Jetpack/JEP/29: Difference between revisions

Jump to navigation Jump to search
→‎Dependency Injection: added implementation notes
m (→‎Extenders: minor rewording)
(→‎Dependency Injection: added implementation notes)
Line 44: Line 44:


Alternatively, if the manifest specifies that the Jetpack only needs to communicate with foo.com, then <tt>XMLHttpRequest</tt> will be injected but attenuated such that connections to domains other than foo.com will fail.
Alternatively, if the manifest specifies that the Jetpack only needs to communicate with foo.com, then <tt>XMLHttpRequest</tt> will be injected but attenuated such that connections to domains other than foo.com will fail.
'''Implementation Notes'''
Injected functionality will be protected by [[XPConnect_Chrome_Object_Wrappers|Chrome Object Wrappers]]. These secure membranes ensure the injection can't lead to privilege escalation.


=== Libraries ===
=== Libraries ===
874

edits

Navigation menu