Ubuntu
seed package

  1. Bug #782972
  2. Comment #10

Comment 10 for bug 782972

Revision history for this message
Kees Cook (kees) wrote :

Right, it's "just" bindings, but right now browsers don't run Python code. :) I'm fine with this all on principle, but I don't want to see JS crossing from the browser to the desktop without a specific security design. Since there isn't one yet, I'll just make an easy one up: "JavaScript must never be passed from the Browser to the Desktop". We can adjust this when there is something that needs to cross that boundary.

+1