Neil's Place

February 20, 2004

101 Things Mozilla can do in Russian
Thanks to Sergey for providing this

12:09 PM Heading into an unknown world

It's official now. I'll be going to the Mozilla developer day next Friday. I've never been to that part of the world before so it should be quite exciting. Especially after Chris Blizzard mentioned that Asa won't be wearing pants. In fact, the farthest west I've been in the US is Miami, which isn't particularly very west. I'll be there for a few days (25th to 29th) so I'll have a bit of a vacation too.

This is a good opportunity for others to complain about XUL documentation to me in person.

Comments ( 36 )

February 17, 2004

Generating XUL with PHP
PHP library outputs XUL tags

February 16, 2004

Woman accidently tries to take grenade across border
Customs found one in her glove compartment.

February 15, 2004

11:15 PM Making remote chrome work

There are many times when people want to use XUL remotely. There are a lot of restrictions on the kinds of things that can be done however. Some are more obvious such as reading local files, but others are really just bugs, such as the buttons on a wizard not appearing properly. There are many times when a remote application will want to have privileges to perform additional operations. Currently, in Mozilla, the only way to allow this is to sign the code, or package the code up into an installable download, which is what all the extensions do. Code signing is not viable in most cases -- you need to get a certificate, the steps involved are difficult and very error-prone, and I haven't been able to get it to work with newer Mozilla versions. Back when I first tried to sign code (many years ago), it took me almost a week to figure out how to do it.

Creating a chrome package is simpler although is more complex than it should be. Many people have problems creating the RDF files necessary, putting files in the right place and packaging the files correctly. Chrome also requires that the package be installed on the user's machine. For many applications, such as those internal company ones that do things like bug tracking, project management, and so forth, this isn't a good solution. Chrome applications currently have no automatic updating mechanism, unlike a web site which can be tweaked every day without hassle. There is some talk of adding such a feature to Firefox soon, but this isn't really a viable solution. Having to install things is just not acceptable in the eyes of many internal support people. Also, having to call enablePrivilege all over the place is too much trouble for some.

Instead, I think a better mechanism would be to use a file containing an application description (like the contents.rdf file) which sits somewhere on a remote site. In addition to the application name and author, it might list permissions that the application desires. It could be simple, such as a site that desires general enhanced access, or fine-grained like listing specific URLs or a base URL that requires access to specified XPCOM components or interfaces.

When this remote description file is read, a message box would appear where the user would be asked to grant permission, along with the option of checking a Remember this Decision checkbox. The user would then be redirected to the actual application, the URL of which is specified in the description file. The application would have whatever privileges are necessary.

In this scheme described above, enhanched privileges are only a click of a Grant button away. Some may think that this would lower the security in the browser, and put the user at greater risk. Not really. Enhanced permissions are already only a click away, since XPInstall only requires a single click for a chrome application to be installed.

People ask all the time about why some feature doesn't work in remote XUL. We need to be able to allow these kinds of operations without resorting to some complex scheme such as code signing which just isn't viable for many purposes. Granted, there are places where a extreme amount of security is needed, but very few ordinary users would have a need for this.

Comments ( 21 )

February 12, 2004

1:07 PM About:mozilla

Hmmm. The about:mozilla text probably doesn't make any sense any more.

Comments ( 25 )

February 11, 2004

The Tide Has Turned in the Battle of the War
The Mozilla battle, that is

February 9, 2004

10:23 PM Firefox and Cars

Hmmm. A screenshot of a car-related website. An indicator of a product's name switch using an odometer. Yes, you can always tell when Ben creates a page on mozilla.org.

Comments ( 7 )

February 6, 2004

7:58 PM Chrome Starter Guide

One of the most common questions asked is how to get a simple chrome application up and running. The XUL App Tutorial describes this. Usually people have problems near the end because they missed a file or typed something in wrong. Since I didn't write the App Tutorial, I am hesitant to change it to be clearer.

However, I have now written a short guide to setting up a chrome application for testing.

Comments ( 38 )

February 5, 2004

1:40 PM To Musicians

Dear musicians and song writers:

Please stop making songs with phone ringing sounds in them.

Thank You.

Comments ( 32 )