Script support in html files (ensure sandboxed) #3366

Open
opened 2019-12-13 01:25:29 +01:00 by tzarebczan · 0 comments
tzarebczan commented 2019-12-13 01:25:29 +01:00 (Migrated from github.com)

If we can properly sandbox html/htm files, we should try enable scripts. Currently, something like this https://lbry.tv/@IanCoville:f/2019-Calendar-Clock:7 fails to render.

Besides your typical client side security, we should also make sure a script can't be used to execute SDK commands.

If we can properly sandbox html/htm files, we should try enable scripts. Currently, something like this https://lbry.tv/@IanCoville:f/2019-Calendar-Clock:7 fails to render. Besides your typical client side security, we should also make sure a script can't be used to execute SDK commands.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: LBRYCommunity/lbry-desktop#3366
No description provided.