[Ietab] Possible to make IE Tab use Gecko engine and implement secure tabs?

Håkon haakeyar-mailinglists at bluezone.no
Tue Dec 25 16:21:39 PST 2007


Hi,

I was just wondering if it would be possible to make IE Tab use the
gecko engine instead of the IE engine. If that is possible and you can
specify your own locations for saving cookies and stuff*, I think it
would be possible to create an extension implementing secure tabs just
by applying a few modifications to IE Tab.

Secure tabs is this idea I've been having about a better protection
for end users against CSRF and similar attacks (of course, I can't
claim to be the fist one to think about it, but I haven't found
anything else written about it). You can read about it at
http://my.opera.com/haakeyar/blog/csrf-we-need-protection, it was
mentioned in the latest episode of The Command Line Podcast
(http://thecommandline.net/2007/12/23/news_125/) and I have suggested
it in the mozilla.dev.security news group/mailing list at
http://groups.google.com/group/mozilla.dev.security/browse_thread/thread/b0a770c9fed95320#da54733dd406c591

I'm sorry if I am asking a stupid question, but I am unable to try IE
Tab (since I am using Linux) and I haven't looked at the source (which
I maybe should have done before asking about this, but I have no
experience with developing extensions for Firefox, no experience with
using browser engines etc, and I figured that you guys who know the
code, probably already know the answer, while I would have had to
spend a lot of time before finding anything useful).

If this is actually doable without too much work, is it something that
you guys could consider to implement? I understand that branching out
the code to create another plugin would be harder to maintain with
bugfixes and all that, but still, it would be very nice to see it
happen.

* I don't have any experience with programming with browser engines,
so I don't really know how it works with cookies and all that.

Regards,
Håkon


More information about the Ietab mailing list