3 ms·
Javascript is not enabled on Posterous pages for security reasons. We'll be introducing ways you can add your own javascript widgets soon. I wonder how good th
by judofyr 17y ago
Javascript is not enabled on Posterous pages for security reasons. We'll be introducing ways you can add your own javascript widgets soon.
I wonder how good their protection is…
- axod 17y agoI can't find it at the moment, but there's a very cool javascript sandbox system at Google Code somewhere. I believe it creates an iframe with a separate domain, writes the js into it, and communicates via message passing/anchor etc. The net result is that you can execute unsafe js, in a sandbox on your page and expose an API to it.
- defen 17y agoAre you thinking of caja? http://code.google.com/p/google-caja/ http://code.google.com/p/google-caja/
- aristus 17y agohttp://code.google.com/p/google-caja/ http://code.google.com/p/google-caja/ It's not an iframe, it's a capability-based filter which provides more security than an iframe can. A lot of sites use it now that it's reasonably fast...