Nsplugins and javascript: urls

Alex Russell alex at netWindows.org
Thu Feb 27 18:20:09 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 28 February 2003 11:35 am, George Staikos wrote:
>   That's not related.  We can support that with a .protocol file if we
> want. javascript: is a special case though.

Is the javascript: pseudo-protocol defined in any public spec? I find it to 
be a dubious hack that allows authors to put scripts in places they don't 
belong. Given the number of security problems that have been pegged to it 
over the years in other browsers, I'm warry of it on a lot of levels.

If konq doesn't already support it, consider this a vote against 
implementing it.

- -- 
Alex Russell
alex at netWindows.org
alex at SecurePipe.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+XlbZoV0dQ6uSmkYRAjb6AJ4yhy4/jcPxHhHja9JyCpSsu4pegwCfcbNL
5p/hGVC2NxaD3s5CujOiY5I=
=J7E3
-----END PGP SIGNATURE-----





More information about the kfm-devel mailing list