FF 3.7 UniversalXPConnent problems.

[John J Barton]

I am trying to run
https://bug448602.bugzilla.mozilla.org/attachment.cgi?id=346112
on a try server build based on FF 3.7a1pre.

The test code contains:
netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");
and it gives an error:

A script from "https://bug448602.bugzilla.mozilla.org" was denied
UniversalXPConnect privileges.
https://bug448602.bugzilla.mozilla.org/attachment.cgi?id=346112
Line 15

I look up:
https://developer.mozilla.org/En/Firefox_addons_developer_guide/Using_XPCOM%E2%80%94Implementing_advanced_processes

but both of the procedures outlined there fail:
1) There is no pop up dialog so I can't say "permit".
2) adding the strings shown in the docs to prefs.js does nothing.

Based on my past experience, the problem with second approach is likely
to be the line;

user_pref("capability.principal.codebase.test.id",
"https://bug448602.bugzilla.mozilla.org/attachment.cgi?id=346112");

I recall that this incantation is very particular and especially obscure.

In hints?
jjb

[L. David Baron]

On Thursday 2009-08-20 15:59 -0700, John J Barton wrote:
> I am trying to run
> https://bug448602.bugzilla.mozilla.org/attachment.cgi?id=346112
> on a try server build based on FF 3.7a1pre.
>
> The test code contains:
> netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");
> and it gives an error:

Testcases that use this have to be downloaded to a local file before
we'll even show the prompt. Otherwise things would be pretty unsafe
for regular Web users who got a puzzling security prompt.

-David

--
L. David Baron http://dbaron.org/
Mozilla Corporation http://www.mozilla.com/

[John J Barton]

L. David Baron wrote:
> On Thursday 2009-08-20 15:59 -0700, John J Barton wrote:
>> I am trying to run
>> https://bug448602.bugzilla.mozilla.org/attachment.cgi?id=346112
>> on a try server build based on FF 3.7a1pre.
>>
>> The test code contains:
>> netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");
>> and it gives an error:
>
> Testcases that use this have to be downloaded to a local file before
> we'll even show the prompt. Otherwise things would be pretty unsafe
> for regular Web users who got a puzzling security prompt.
>
> -David
>

Thanks. In fact smaug even said as much "...a local copy of <url>", I
just did not notice that this was essential, not optional.

jjb