From: Karl Dahlke <eklhad@comcast.net>
To: Edbrowse-dev@lists.the-brannons.com
Subject: [Edbrowse-dev] much more general plugin system
Date: Sun, 11 Mar 2018 11:13:52 -0400 [thread overview]
Message-ID: <20180211111352.eklhad@comcast.net> (raw)
In-Reply-To: <20180311133017.5luo5p5u76xah72g@toaster>
[-- Attachment #1: Type: text/plain, Size: 1899 bytes --]
Adam writes:
> an attribute to prevent some protocols
> from being called by js from the internet.
I touched upon this briefly, suggesting a theoretical way js could get at local files.
TBH, I don't think js should access any of our plugins, period.
It fetches files via transport, that's it.
I must have been thinking this at a subconscious level, because it's already implemented, at least 3/4.
In the following program, zipx://hole.zip@:@talk is a valid
url to extract a file from my zip archive. The db3 log follows.
<head>
<script src=zipx://hole.zip@:@talk></script>
<LINK href=zipx://hole.zip@:@talk rel=stylesheet type=text/css>
</head>
<body>
<p> hello world
<iframe src=zipx://hole.zip@:@talk></iframe>
<script>
// access a variable that will expand the frame
frames[0].contentDocument;
var xhr = new XMLHttpRequest;
xhr.url = "zipx://hole.zip@:@talk";
xhr.method = "GET";
xhr.send("", 0);
</script>
</body>
* b
create js context 0
css source zipx://hole.zip@:@talk
894 persistent cookies, 0 expired
the zipx protocol is not supported by edbrowse
could not fetch CSS
execute eb$qs$start
execution complete
js source zipx://hole.zip@:@talk
the zipx protocol is not supported by edbrowse
could not fetch javascript
execute jg at 9
fetch frame zipx://hole.zip@:@talk
plugin ebunzip zipx://hole.zip@:@talk
text type is ascii
create js context 1
execute eb$qs$start
execution complete
xhr zipx://hole.zip@:@talk
the zipx protocol is not supported by edbrowse
execution complete
52
* qt
894 persistent cookies, 0 expired
As you see, a frame can tap into our protocols, and I wanted that because frames are often youtube videos, and I want to type exp and listen to the video.
An approach here might be that frames can run players, but not converters.
A frame will never be a word doc, for instance.
What do you think?
Karl Dahlke
prev parent reply other threads:[~2018-03-11 15:12 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-03-04 14:20 Karl Dahlke
2018-03-09 20:40 ` Adam Thompson
[not found] ` <20180311133017.5luo5p5u76xah72g@toaster>
2018-03-11 15:13 ` Karl Dahlke [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180211111352.eklhad@comcast.net \
--to=eklhad@comcast.net \
--cc=Edbrowse-dev@lists.the-brannons.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).