On Jun 30, 5:38 pm, Nelson B Bolyard <[EMAIL PROTECTED]> wrote: > tmountjr wrote, On 2008-06-30 09:46: > > > I have confirmed that [...] the option to hide the extension from the > > list works. > > Please elaborate on that. What extensions from what list? In general, > it is evil if extension authors can hide the existence of extensions. > I'd go so far as to call it a vulnerability (not to mention a support > nightmare).
Well, now that you mention it, yes, that could be bad. The feature is built into the CCK - you can hide extensions from the add-ons list, prevent them from being uninstalled... ...you guys didn't know this? It didn't hit me at the time, but now that you frame it like that, I can see the problem. I'll email you a screenshot of the config screen. Far as I could tell the only difference was in the cck.properties file, and those properties are acted upon in lines 282-297 of the cckService.js file. Looks like it asserts the property to a resource: http://www.mozilla.org/2004/em-rdf#hidden and http://www.mozilla.org/2004/em-rdf#locked. At this point I'm in way over my head, but I'd guess that this is an undocumented feature somewhere. Happy to do some more testing, but I'm sure there are people who know far more than I that are paid to do this. _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
