Mozilla Developer Network

For increased security, Firefox will enable “XPCNativeWrappers” by default after Deer Park Alpha 2 in preparation for the Firefox 1.1 beta and final release. This may significantly impact extension authors, who may need to make configuration or code changes to securely provide functionality.

To understand XPCNativeWrappers, read the developer.mozilla.org article about securely access content objects from chrome. To understand how your extension chrome registration may affect the use of XPCNativeWrappers see the document on chrome registration.

Any extension that accesses non-DOM properties (JS properties) of DOM objects loaded by “untrusted” content will be affected by this change. Extension authors should begin testing their extensions with xpcnativewrappers=yes in their chrome registration immediately.

Developers who have questions about the change should ask in the newsgroup netscape.public.mozilla.dom.

This entry was posted by bsmedberg on Wednesday, July 13th, 2005 at 5:54 am and is filed under General, Security.