[Greasemonkey] Looking for example code that uses new E4X facilities to parse some XML...

Aaron Boodman zboogs at gmail.com
Thu Dec 22 20:05:28 EST 2005


On 12/22/05, Jeremy Dunck <jdunck at gmail.com> wrote:
> On 12/22/05, comex <comexk at gmail.com> wrote:
> > > I realize that I could use the whole "unsafe window" thing, but I would
> > > prefer to
> > > do this processing in the most official, most reliable way possible.
> >
> > This certainly doesn't answer your question, but
> >  var DOMParser = new XPCNativeWrapper(window, "DOMParser").DOMParser;
> > works and is secure, as far as I know.
>
> Yes, it's secure.

No it's not - a helpful Mozilla tester showed me why. I'll send more
details if I can find time over the weekend. Gotta run right now
though, sorry.

Basically, since XPCNW is not deep, the properties and prototyep and
what not of the returned object are not secure.

- a


More information about the Greasemonkey mailing list