Changes between Version 17 and Version 18 of GSoCIdeas2010


Ignore:
Timestamp:
2009-03-16T22:31:31Z (15 years ago)
Author:
nejucomo
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • GSoCIdeas2010

    v17 v18  
    1515   * A blog-like app (perhaps addressing tiddly wishlist items)
    1616   * Port another light-weight server open source web app to Tahoe+javascript (calendar, photo album)
    17  * Fix Same-Origin-Policy design issue.  Web content from different authors can interact in unintended ways in the victims browser, such as JavaScript iterating over open windows, or peeking at a referrer header.  Before this project is undertaken, the problem description and proposed solutions need careful design review and consideration!  The solutions should be considered prototypes and should be backwards compatible with the Tahoe network.
     17 * Fix Same-Origin-Policy design issue.  Web content from different authors can interact in unintended ways in the victims browser, such as Javascript iterating over open windows, or peeking at a referrer header.  Before this project is undertaken, the problem description and proposed solutions need careful design review and consideration!  The solutions should be considered prototypes and should be backwards compatible with the Tahoe network.
    1818   * Domain Mangling approaches:
    1919     * HTTP proxy approach
    2020     * Special scheme handling in browser add-ons
    21    * CAJA approach:
     21   * CAJA approach: Require all Javascript to pass the CAJA verifier in the Tahoe web frontend, then create an interface to the tahoe webapi which matches the intended capability semantics.
    2222
    2323= Mentors =