Confirmed users, Bureaucrats and Sysops emeriti
419
edits
Mozilla2:CAPSSecurity: Difference between revisions
Jump to navigation
Jump to search
→Dividing and Defining Secured and Unsecured Code
(removing link-spam) |
|||
| Line 43: | Line 43: | ||
<ol type="1"> | <ol type="1"> | ||
<li> Wrapper-creation check | <li> Wrapper-creation check | ||
<ol | <ol> | ||
<li>get nsIClassInfo, check the flags for a DOM node. If it's a DOM node, you can have a wrapper. | <li>get nsIClassInfo, check the flags for a DOM node. If it's a DOM node, you can have a wrapper. | ||
<li>else get nsISecurityCheckedComponent and check canCreateWrapper | <li>else get nsISecurityCheckedComponent and check canCreateWrapper | ||
</ol> | </ol> | ||
<li>xpconnect access checks go through nsIXPCSecurityManager CanAccess | <li>xpconnect access checks go through nsIXPCSecurityManager CanAccess | ||
<ol | <ol> | ||
<li>Get the security policy of the current calling code (subject) | <li>Get the security policy of the current calling code (subject) | ||
<li>do same-origin checks if specified | <li>do same-origin checks if specified | ||