I don't how this work (Xray vision).

Code, in the child process, is executed this way:

+    let sandbox = new Cu.Sandbox(content, {
+      sandboxPrototype: content,
+      wantXrays: false,
+      sandboxName: "browser-api-execute-script"
+    });
+
+    let sandboxRv = Cu.evalInSandbox(script, sandbox, "1.8");

I use `wantXrays: false`, but I don't know what we really want here.


On Tue, Jun 16, 2015 at 7:34 PM, Bobby Holley <bobbyhol...@gmail.com> wrote:
> On Tue, Jun 16, 2015 at 10:21 AM, smaug <sm...@welho.com> wrote:
>
>> What is the context where the scripts would run? In the page or something
>> more like a TabChildGlobal (the child side of a message manager)
>> but without chrome privileges?
>
>
> This is also worth emphasizing - without Xray Vision (which you can't have
> without an elevated principal), you basically have no guarantees that your
> code does what you expect.
> _______________________________________________
> dev-platform mailing list
> dev-platform@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-platform



-- 
Paul
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform

Reply via email to