Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code | Sign in
(120)

Issue 1529041: Support for extending script tags to support other languages via translation (Closed)

Can't Edit
Can't Publish+Mail
Start Review
Created:
15 years, 10 months ago by Jasvir
Modified:
15 years, 2 months ago
Reviewers:
MarkM
CC:
google-caja-discuss_googlegroups.com
Base URL:
http://google-caja.googlecode.com/svn/trunk/
Visibility:
Public.

Description

Script tags support a language attribute which causes a different language interpreter to be used on the contents of the script block. This increases the attack surface that needs to be understood. An alternative is to translate source languages into a single or a small number of target languages which can then be understood and secured. This mechanism would also be useful to simplify the composition of a web page that has a mix of trusted (that needs to be innocent-transformed) code and untrusted (that needs to be cajoled) as well as allow a page to be coded in a mix of langauges (e2js, caja, gwt, flapjacks).

Patch Set 1 #

Total comments: 1

Patch Set 2 : Support for extending script tags to support other languages via translation #

Unified diffs Side-by-side diffs Delta from patch set Stats (+147 lines, -0 lines) Patch
M build.xml View 1 chunk +3 lines, -0 lines 0 comments Download
A src/com/google/caja/service/extended.js View 1 1 chunk +144 lines, -0 lines 0 comments Download

Messages

Total messages: 5
Jasvir
15 years, 10 months ago (2010-06-03 21:26:22 UTC) #1
Jasvir
This change still has a lot of sharp corners. Feedback appreciated.
15 years, 10 months ago (2010-06-03 21:27:07 UTC) #2
MarkM
http://codereview.appspot.com/1529041/diff/1/2 File src/com/google/caja/service/extended.js (right): http://codereview.appspot.com/1529041/diff/1/2#newcode53 src/com/google/caja/service/extended.js:53: * LANG_URL (1 & 2) = is the uri ...
15 years, 10 months ago (2010-06-03 21:38:59 UTC) #3
Jasvir
Done
15 years, 10 months ago (2010-06-03 22:31:30 UTC) #4
Jasvir
15 years, 2 months ago (2011-01-31 23:05:28 UTC) #5
Retracting the CL - a lot of issues and no clear benefit.

On 2010/06/03 22:31:30, jasvir wrote:
> Done
Sign in to reply to this message.

Powered by Google App Engine
RSS Feeds Recent Issues | This issue
This is Rietveld f62528b