On 10/9/2013 11:18 AM, Boris Zbarsky wrote:
On 10/9/13 12:01 PM, Gervase Markham wrote:
In the spirit of learning from this, what's next on the chopping block?
RDF
Having gone through some of the ancient security bugs, it looks like the
walking-security-hole aspect of RDF was limited mostly to mailnew's
horrific abuse of it for folders. That aspect I have a plan to
eliminate; the use of it for templated UI is, too my knowledge, not a
security issue per se.
Also, to those who believe that localstore.rdf is the only use of RDF
remaining in Firefox, I can only cock my head and laugh. MXR reveals
that charsets, mimetypes, and help (which is in toolkit, but may only be
in SeaMonkey these days) are still present uses in mozilla-central. And
I'm sure that a significant number of addons still use it. (I'd refer
you to an MXR results for addons, but this is the sort of thing where it
fails miserably since it doesn't let me search "only addons that work on
maintained versions of Firefox").
--
Joshua Cranmer
Thunderbird and DXR developer
Source code archæologist
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform
