[Greasemonkey] say horray for evalInSandbox()

Aaron Boodman zboogs at gmail.com
Tue Jul 19 10:18:27 EDT 2005


Which patch?

On 7/19/05, Nikolas Coukouma <lists at atrus.org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Aaron Boodman wrote:
> 
> > Thanks to help from Shaver and Brendan I was able to get this
> > working with basically zero compatibility loss from previous
> > versions.
> >
> > This should be more or less immune to script or API leakage. Check
> > it out.
> >
> > Only problems:
> >
> > * it's pretty slow! ~20-40ms for each insertion * having trouble
> > getting decent error reports when user scripts fail
> 
> I've rolled a version of 0.4 with the patch applied. It works in Deer
> Park, unlike 0.3.5 . The caveats mentioned above still apply, of
> course, but it's probably more bearable than disabling Greasemonkey or
> running around with a vulnerable version.
> 
> http://atrus.org/hosted/greasemonkey-0.4.0-alpha.xpi
> |MD5 checksum: e7fdb2dbb85e96d1c880bb66bcfab468
> 
> - -Nikolas Coukouma
> |
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> 
> iD8DBQFC3Saas2zR4YuWmeERAgNzAJ40GwosWPCWEO+BBo0/s7eGzqAFhACgiUFM
> 4bGN2CpT3//t7tlyzNPgHPg=
> =ZTCR
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Greasemonkey mailing list
> Greasemonkey at mozdev.org
> http://mozdev.org/mailman/listinfo/greasemonkey
>


More information about the Greasemonkey mailing list