Components.classes access denied

[Panayiotis Andriopoulos]

Hi,

I just found out that since Jetpack 0.5 XPConnect is out of limits.

Is this a permanent decision? (I wish not!)

Thanks

[teramako]

Hi

> Is this a permanent decision? (I wish not!)

Probably, yes

See: https://bugzilla.mozilla.org/show_bug.cgi?id=494779

But still can access from "jetpack.tabs
[0].raw.ownerDocument.defaultView.Cc"
and "jetpack.tabs[0].raw.ownerDocument.defaultView.Ci".
I think this needs to be denied also.

Best regards

[Panayiotis Andriopoulos]

Thanks for the tip.

I don't have permission to view the bug, but I can imagine the
reasoning.

Still, I think a Jetpack-for-developers-only version, perhaps without
the ability to install third-party scripts, would be a great tool for
people who want to test a snippet of trusted code on the fly.

Obviously this was not part of Jetpack's stated purpose, but maybe it
does worth a second thought.

[Paul O’Shannessy]

FWIW you can test snippets of privileged code by pasting them in the
browser's error console. Components.classes & such are available.

Keep in mind code run from there isn't executed in Jetpack scope & is
fully contained within each evaluation.