[tahoe-lafs-trac-stream] [tahoe-lafs] #615: Can JavaScript loaded from Tahoe access all your content which is loaded from Tahoe?

[tahoe-lafs]

#615: Can JavaScript loaded from Tahoe access all your content which is loaded
from Tahoe?
-------------------------+-------------------------------------------------
     Reporter:  zooko    |      Owner:  davidsarah
         Type:  defect   |     Status:  assigned
     Priority:           |  Milestone:  soon
  critical               |    Version:  1.3.0
    Component:  code-    |   Keywords:  newcaps confidentiality integrity
  frontend-web           |  preservation capleak gsoc
   Resolution:           |
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by davidsarah):

 Essential reading on how different browsers handle unique origins (as
 needed for comment:8 and similar fixes to work):
 http://code.google.com/p/browsersec/wiki/Part2#Origin_inheritance_rules

-- 
Ticket URL: <http://tahoe-lafs.org/trac/tahoe-lafs/ticket/615#comment:20>
tahoe-lafs <http://tahoe-lafs.org>
secure decentralized storage