Using Signed Scripts (cont’d)
Signed scripts may request expanded privileges
For example, to access private data: netscape.security.PrivilegeManager. enablePrivilege( "UniversalBrowserRead" );
“UniversalBrowserRead” is just one of many target privileges that may be requested
- "UniversalBrowserAccess” is read and write
- "UniversalFileRead” allows reading of client files
Unsigned Scripts and Signed Scripts can NOT be mixed in same document
One access methods in signed scripts from unsigned scripts (in a different layer or window) as long as signed script exports method and using script imports it
- export signedmethod; in window signedwindow
- import signedwindow.signedmethod; in another window
- Use as signedmethod(arguments);