[tahoe-lafs-trac-stream] [tahoe-lafs] #827: Put file download links ('?save=true') in WUI directory listings
tahoe-lafs
trac at tahoe-lafs.org
Mon Aug 27 19:01:33 UTC 2012
#827: Put file download links ('?save=true') in WUI directory listings
-------------------------+-------------------------------------------------
Reporter: | Owner: davidsarah
davidsarah | Status: assigned
Type: defect | Milestone: 1.11.0
Priority: major | Version: 1.5.0
Component: code- | Keywords: security usability capleak docs
frontend-web | download easy
Resolution: |
Launchpad Bug: |
-------------------------+-------------------------------------------------
Comment (by davidsarah):
Please stay on topic for this ticket! A separate ticket should be filed
for the multiple-port idea, or use #615 for general discussion of WUI
same-origin and sandboxing issues.
Comment that should really be on #1797, except that it's addressing
comment:14 :
* Note that HTML5 sandbox does not in any way require JS. Nor does it
stop single-page JS webapps served from Tahoe from working, if {{{allow-
scripts}}} is set in the {{{sandbox}}} tag. Multi-page JS webapps can
also work if they do not rely on same-origin information sharing, although
we might need to handle .css and .js filetypes differently because the
browser will be expecting them to be served raw, not framed.
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/827#comment:15>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list