Search completed in 0.92 seconds.
Components.utils.Sandbox
components.utils.
sandbox is used to create a
sandbox object for use with evalin
sandbox().
... components.utils.
sandbox is used to create a
sandbox object for use with evalin
sandbox().
... components.utils.
sandbox is used to create a
sandbox object for use with evalin
sandbox().
...And 60 more matches
loader/sandbox - Archive of obsolete content
experimental create javascript
sandboxes and execute scripts in them.
... experimental create javascript
sandboxes and execute scripts in them.
... experimental create javascript
sandboxes and execute scripts in them.
...And 27 more matches
Components.utils.evalInSandbox
the evalin
sandbox() function enables you to evaluate javascript code inside a
sandbox you've previously created using the components.utils.
sandbox constructor.
... the evalin
sandbox() function enables you to evaluate javascript code inside a
sandbox you've previously created using the components.utils.
sandbox constructor.
... the evalin
sandbox() function enables you to evaluate javascript code inside a
sandbox you've previously created using the components.utils.
sandbox constructor.
...And 24 more matches
CSP: sandbox - HTTP
the http content-security-policy (csp)
sandbox directive enables a
sandbox for the requested resource similar to the <iframe>
sandbox attribute.
...it applies restrictions to a page's actions including preventing popups, preventing the execution of plugins and scripts, and enforcing a same-origin policy.
...s actions including preventing popups, preventing the execution of plugins and scripts, and enforcing a same-origin policy.
...And 7 more matches
Creating Sandboxed HTTP Connections
introduction starting with gecko 1.8.1 (firefox 2), it is possible to create
sandboxed http connections which don't affect the user's cookies.
...e is overwritten.
Appendix D: Loading Scripts - Archive of obsolete content
ing, based on the encoding of the overlay, and will execute as javascript version 1.8, based on the version specified in the script tag.
...erlay, and will execute as javascript version 1.8, based on the version specified in the script tag.
...specified in the script tag.
...And 38 more matches
/loader - Archive of obsolete content
the loader itself: let { loader, require, unload } = require('toolkit/loader'); what is it good for ?
... // will return our `loadermodule`.
...e = module('foo/bar', 'resource:///modules/foo/bar.js'); note that this won't actually load any module code, it just creates a placeholder for it.
...And 13 more matches
nsIXPConnect
xpconnect service, use code like this: nsresult rv; nscomptr<nsixpconnect> xpconnect = do_getservice(nsixpconnect::getcid(), &rv); if (ns_succeeded(rv)) { /* use the object */ } method overview void addjsholder(in voidptr aholder, in nsscriptobjecttracerptr atracer); native code only!
... void debugdumpjsstack(in prbool showargs, in prbool showlocals, in prbool showthisprops); void debugdumpobject(in nsisupports acomobj, in short depth); [noscript,notxpcom] prbool definedomquickstubs(in jscontextptr cx, in jsobjectptr proto, in pruint32 flags, in pruint32 interfacecount, [array, size_is(interfacecount)] in nsiidptr interfacearray); jsval evalin
sandboxobject(in astring source, in jscontextptr cx, in nsixpconnectjsobjectholder
sandbox, in prbool returnstringonly); native code only!
...ptobjecttracerptr atracer ); parameters aholder the object that hold the js objects that should be rooted.
...And 13 more matches
Xray vision
using system privileges.
...e is compromised, the attacker can take over the user's computer.
...loaded from normal web pages is called content code.
...And 13 more matches
Modules - Archive of obsolete content
ly on the host application to provide it with functionality such as loading subscripts, and exporting/ importing names.
...pplication to provide it with functionality such as loading subscripts, and exporting/ importing names.
...tion such as firefox and thunderbird.
...And 10 more matches
Content Processes - Archive of obsolete content
in addition to the port property, workers also support the web worker api, which allows scripts to send messages to each other using the postmessage function.
...on to the port property, workers also support the web worker api, which allows scripts to send messages to each other using the postmessage function.
... to send messages to each other using the postmessage function.
...And 9 more matches
Security best practices in extensions - Archive of obsolete content
n as the docshell.
...s = false; frame.docshell.allowjavascript = false; frame.docshell.allowplugins = false; there are more examples listed in the document listed above in this section.
...ain circumstances you may want to run code in your extension, but you would like to give it restricted privileges.
...And 9 more matches
JSAPI User Guide
to files, the network, or anything browser-related.
...s called object-capabilities security.
...ead the book.
...And 9 more matches
New Security Model for Web Services - Archive of obsolete content
securing resources from untrusted scripts behind firewalls introduction this page describes an alternative mechanism which can be used to protect all internal resources against requests from
sandboxed scripts.
... securing resources from untrusted scripts behind firewalls introduction this page describes an alternative mechanism which can be used to protect all internal resources against requests from
sandboxed scripts.
...scripts.
...And 8 more matches
From object to iframe — other embedding technologies - Learn web development
oesn't mean that you shouldn't use them in your websites — it just requires some knowledge and careful thinking.
...nt the iframe to be.
...or embedding via an <iframe> will make it available via https — look at the urls inside the <iframe> src attribute when you are embedding content from google maps or youtube, for example.
...And 8 more matches
core/namespace - Archive of obsolete content
ment } = dom(this); element.parentnode.removechild(element); // ...
...dget.js let { cu } = require('chrome'); let { ns } = require('sdk/core/namespace'); let { view } = require('./view'); // note this is completely independent from view's internal namespace object.
...u } = require('chrome'); let { ns } = require('sdk/core/namespace'); let { view } = require('./view'); // note this is completely independent from view's internal namespace object.
...And 6 more matches
Index
erty of type nsistackframe (idl definition) that represents a snapshot of the current javascript callstack.
...an be used for various diagnostic purposes.
...ostic purposes.
...And 5 more matches
Language bindings
/idl/xpccomponents.idl.components.utils.cloneintothis function provides a safe way to take an object defined in a privileged scope and create a structured clone of it in a less-privileged scope.
...s.idl.components.utils.cloneintothis function provides a safe way to take an object defined in a privileged scope and create a structured clone of it in a less-privileged scope.
... take an object defined in a privileged scope and create a structured clone of it in a less-privileged scope.
...And 5 more matches
Limitations of chrome scripts
eners in the content process, relaying the result back to the chrome process.
...ss, relaying the result back to the chrome process.
...ss.
...And 4 more matches
GC and CC logs
those c++ objects.
... from within firefox to manually generate gc and cc logs, navigate to about:memory and use the buttons under "save gc & cc logs." "save concise" will generate a smaller cc log, "save verbose" will provide a more detailed cc log.
...e gc and cc logs, navigate to about:memory and use the buttons under "save gc & cc logs." "save concise" will generate a smaller cc log, "save verbose" will provide a more detailed cc log.
...And 4 more matches
Components.utils
returns an array created in specified compartment.
...compartment.
...e.
...And 4 more matches
Using IndexedDB in chrome
ser's browser from content javascript.
...pis can also be accessed from system-privileged javascript using the components.utils.importglobalproperties() function: components.utils.importglobalproperties(["indexeddb"]); // from here on, it's like using indexeddb from content var req = indexeddb.open("my-database"); // ...
...ddb"]); // from here on, it's like using indexeddb from content var req = indexeddb.open("my-database"); // ...
...And 4 more matches
Introduction to the File and Directory Entries API - Web APIs
the file and directory entries api simulates a local file system that web apps can navigate around.
...gement.
...nd directory entries api has asynchronous and synchronous versions when using the asynchronous api, always use the error callbacks the file and directory entries api interacts with other apis the file and directory entries api is case-sensitive the file and directory entries api is a virtual representation of a file system the api doesn't give you access to the local file system, nor is the
sandbox really a section of the file system.
...And 4 more matches
Index - Web APIs
sents an absolute or relative number of milliseconds, depending on the specification in which it appears.
... <input> element or by drag and drop.
...d, write, and create files and/or directories in a virtual,
sandboxed file system.
...And 4 more matches
Storage Access API - Web APIs
for resources loaded from all embedded origins and possibly across all websites.
...igin content can request unrestricted access to its first-party storage on a site-by-site basis via the document.requeststorageaccess() method, and check whether it already has access via the document.hasstorageaccess() method.
...n,
sandboxed <iframe>s cannot be granted storage access by default for security reasons.
...And 3 more matches
Jetpack Processes - Archive of obsolete content
me, areceiver) similar to nsijetpack.unregisterreceiver(), this function unregisters a callback previously registered with registerreceiver().
...egisterreceiver(), this function unregisters a callback previously registered with registerreceiver().
...me.
...And 2 more matches
Components object
call stack current javascript call stack utils provides access to several useful features utils.atline provides access to the value of the atline property in the javascript environment.
... stack utils provides access to several useful features utils.atline provides access to the value of the atline property in the javascript environment.
...back function to receive notification once collection is complete.
...And 2 more matches
Content-Security-Policy - HTTP
es of application manifest files.
...for worker, sharedworker, or serviceworker scripts.
...orker, or serviceworker scripts.
...And 2 more matches
HTTP Index - HTTP
lation reports consist of json documents sent via an http post request to the specified uri.
...ost request to the specified uri.
...i-for csp, directive, http, reference, security, subresource integrity, require-sri-for the http content-security-policy require-sri-for directive instructs the client to require the use of subresource integrity for scripts or styles on the page.
...And 2 more matches
Tamarin build documentation - Archive of obsolete content
running $avm hello.abc (where hello.abc is a simple abc to print a string, or can substitute with any test abc) now any acceptance or performance tests can be run as on desktop using test/acceptance/runtests.py or tests/performance/runtests.py tamarin buildbot adobe maintains a continuous build and test system for tamarin redux, similar to tinderbox.
...sktop using test/acceptance/runtests.py or tests/performance/runtests.py tamarin buildbot adobe maintains a continuous build and test system for tamarin redux, similar to tinderbox.
...he change number and not the hash.
...ption: self explanatory check the status of the build @ http://tamarin-builds.mozilla.org/tamarin-redux/ , you can also see your build request in the queue at http://tamarin-builds.mozilla.org/build_trigger/requestbuild.cfm.
Tamarin Tracing Build Documentation - Archive of obsolete content
//developer.mozilla.org/en/docs...formance_tests tamarin buildbot adobe maintains a continuous build and test system for tamarin tracing and continuous build and test system for tamarin central, similar to tinderbox.
...m for tamarin central, similar to tinderbox.
...g.mozilla.org/ are accepted.
...on: specify the revision number that will be built.
LocalFileSystem - Web APIs
the localfilesystem interface of the file system api gives you access to a
sandboxed file system.
... the localfilesystem interface of the file system api gives you access to a
sandboxed file system.
...ed to call requestquota() again.
...tion temporary 0 transient storage that can be be removed by the browser at its discretion.
Window.print() - Web APIs
a pull request.
... full support 12firefox full support 1ie full support 5opera full support 6notes full support 6notes notes starting with opera 33, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.safari full support 1.1webview android full support 1notes full support 1notes notes starting with webview 46, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.chrome android ...
...t 1notes notes starting with webview 46, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.chrome android full support 18notes full support 18notes notes starting with chrome 46, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.firefox android no support nonotes no support nonotes notes see bug 1247609.opera android full support 10.1notes full support 10.1notes notes starting with opera 33, this method is...
...irefox android no support nonotes no support nonotes notes see bug 1247609.opera android full support 10.1notes full support 10.1notes notes starting with opera 33, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.safari ios full support 1samsung internet android full support 1.0notes full support 1.0notes notes starting with samsung internet 5.0, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow...
Window.prompt() - Web APIs
pull request.
... does not display a prompt to the user, and always returns undefined.
...33, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.safari full support 1webview android full support 1notes full support 1notes notes starting with webview 46, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.chrome android full support 18notes full support 18notes notes starting with chrome 46, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.firefox android full support 4opera andr...
...thod is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.firefox android full support 4opera android full support 10.1notes full support 10.1notes notes starting with opera 33, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow-modals.safari ios full support 1samsung internet android full support 1.0notes full support 1.0notes notes starting with samsung internet 5.0, this method is blocked inside an <iframe> unless its
sandbox attribute has the value allow...
Index - HTTP
ate the content security policy.
...via an http post request to the specified uri.
...the specified uri.
...sp, directive, http, reference, security the http content-security-policy require-sri-for directive instructs the client to require the use of subresource integrity for scripts or styles on the page.
Appendix C: Avoiding using eval in Add-ons - Archive of obsolete content
d within a very different security context, namely a website, where the origin of the data is usually known in all instances and where vulnerabilities would have a much smaller impact.
...f you compute the names using external data.
...lternative: using bracket-access to object properties object properties can always accessed using the bracket syntax: obj["property"] === obj.property hence the following will work just fine without having to resort to eval.
Index - Archive of obsolete content
io/file provides access to the local filesystem.
...to the local filesystem.
...ensions is using xmlhttprequest (or some other mechanism) to download javascript or json (they are different) from a remote website.
Investigating leaks using DMD heap scan mode
ory for your firefox dmd build, $srcdir for the top level of the firefox source directory, and $heapgraph for the location of the heapgraph repo, and $logdir for the location you want logs to go to.
... alive, you can use this to easily see if we leaked an nsfoo object.
...leaked an nsfoo object.
Components.utils.createObjectIn
components.utils.createobjectin creates a new javascript object in the scope of the specified object's compartment.
... components.utils.createobjectin creates a new javascript object in the scope of the specified object's compartment.
... components.utils.createobjectin creates a new javascript object in the scope of the specified object's compartment.
HTMLIFrameElement - Web APIs
by which to refer to the frame.
...aturepolicy read only returns the featurepolicy interface which provides a simple api for introspecting the feature policies applied to a specific document.
...definition of 'htmliframeelement' in that specification.
LocalFileSystemSync - Web APIs
the localfilesystemsync interface of the file system api gives you access to a
sandboxed file system.
...ss to a
sandboxed file system.
...s fileexception; constants constant value description temporary 0 transient storage that can be be removed by the browser at its discretion.
Makefiles - Best practices and suggestions
laundry list makefiles should remove all content that it will generate.
...ts ##################################################### ## extra dep needed to synchronize parallel execution ##################################################### $(ts): $(ts)/.done $(ts)/.done: $(mkdir) -p $(dir $@) touch $@ # "clean" target garbage_dirs += $(ts) maintain clean targets - makefiles should be able to remove all content that is generated so "make clean" will return the
sandbox/directory back to a clean state.
Gecko Logging
file logging output can be redirected to a file by passing its path via an environment variable.
...t variable.
Introduction to the JavaScript shell
dumpheap([filename[, start[, tofind[, maxdepth[, toignore]]]]]) added in spidermonkey 1.8 dump the graph of all existing objects (or a specific interesting subgraph) to a file.
...pecified, the code is executed in that object, treating it as a
sandbox.
Components.utils.evalInWindow
vileged code, such as add-on code, to access variables and apis defined in web content.
...is defined in web content.
Mozilla
ol comes from the fact that there is more than one way to achieve any given visual effect in a browser.
...effect of complex markup is being tested, put that complex markup into a page and create another page that uses simple markup to achieve the same visual effect.
FileSystem - Web APIs
ory entries api interface filesystem is used to represent a file system.
...will not grant you access to the users filesystem.
File and Directory Entries API - Web APIs
the file and directory entries api simulates a local file system that web apps can navigate within and access files in.
...s an error which is generated by synchronous file system calls.
MediaDevices.getUserMedia() - Web APIs
f the obvious security concern associated with getusermedia() if used unexpectedly or without security being carefully managed, it can only be used in secure contexts.
... or without security being carefully managed, it can only be used in secure contexts.
Pointer Lock API - Web APIs
"#f00"; ctx.beginpath(); ctx.arc(x, y, radius, 0, degtorad(360), true); ctx.fill(); } iframe limitations pointer lock can only lock one iframe at a time.
...ly lock one iframe at a time.
remote/parent - Archive of obsolete content
in"); processes.port.on("message-from-remote", function(process, message) { console.log("remote says: " + message); }); child process privileges a module loaded into a child process can't do everything that the same module loaded into the parent process can.
Developing for Firefox Mobile - Archive of obsolete content
ore/promise supported event/core supported event/target supported frame/hidden-frame supported frame/utils supported io/byte-streams supported io/file supported io/text-streams supported lang/functional supported lang/type supported loader/cuddlefish supported loader/
sandbox supported net/url supported net/xhr supported places/bookmarks not supported places/favicon not supported places/history not supported platform/xpcom supported preferences/service supported stylesheet/style supported stylesheet/utils supported system/environment supported ...
Index of archived content - Archive of obsolete content
core/namespace core/promise dev/panel event/core event/target frame/hidden-frame frame/utils fs/path io/byte-streams io/file io/text-streams lang/functional lang/type loader/cuddlefish loader/
sandbox net/url net/xhr places/bookmarks places/favicon places/history platform/xpcom preferences/event-target preferences/service remote/child remote/parent stylesheet/style stylesheet/utils system/child_process ...
bootstrap.js - Extensions
the bootstrap.js script should contain several specific functions, which are called by the browser to manage the extension.
Frame script environment
d on the global: instead, top-level variables are stored in a special per-script object that delegates to the per-tab global.
Performance
delayedframescript("resources://my-addon/framescript.js"); services.ppmm.removedelayedprocessscript("resources://my-addon/processcript.js"); services.mm.broadcastasyncmessage("my-addon:unload"); services.ppmm.broadcastasyncmessage("my-addon:unload"); } in the frame/process scripts: remove all kinds of listeners remove observer notifications remove custom categories and services nuke
sandboxes unload jsms restore content dom states where necessary, e.g.
DMD
ocess environment variable, which can take the following values.
WebIDL bindings
ble] used to flag a method that, when called, will not have the same-origin constraint tested: it can be called from a context with a different origin.
Window.requestFileSystem() - Web APIs
the non-standard window method requestfilesystem() method is a google chrome-specific method which lets a web site or app gain access to a
sandboxed file system for its own use.
init() - Web APIs
criptcontext, in nsiglobalobject globalobject, in nsiuri baseuri, [optional] in nsiloadgroup loadgroup ); parameters principal the principal to use for the request; this must not be null.
HTML5 - Developer guides
traint validation api, several new attributes, new values for the <input> attribute type and the new <output> element.