On Fri, 26 Apr 2013 09:31:30 -0700, Ben Adida wrote:
>> 3. I recall talking with Fabrice that this was a non-trivial amount of
>> work for fixing this,
>
> I'm having trouble seeing how that is. We can stage the feature in a
> couple of ways, first by letting marketplace packaged apps claim an
> origin. That's one line in the manifest and a change to the app's origin
> from app://<guid> to app://facebook.com. The self-hosted use case can be
> fixed later.
Because my understanding was that people wanted packaged apps to have http
(s) origins to allow them to retrieve data from remote sites without
using CORS or SystemXHR. If this is just about choosing the app://XXX
origin, this is much simpler indeed. But it doesn't really solve the
issue for eg. some oauth providers that only accept http(s) redirection
URIs.
The origin of hosted apps is already the origin of the manifest, so I
don't think we have anything to change there.
Fabrice
_______________________________________________
dev-platform mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-platform
