From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: [PATCH] Add user content APIs for WebKit Xwidgets Date: Fri, 28 Aug 2020 16:37:49 +0200 Message-ID: <87y2lyu98i.fsf@gnus.org> References: Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="36767"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) Cc: "emacs-devel@gnu.org" To: Qiantan Hong Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Fri Aug 28 17:00:29 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kBfrh-0009RZ-Lk for ged-emacs-devel@m.gmane-mx.org; Fri, 28 Aug 2020 17:00:29 +0200 Original-Received: from localhost ([::1]:37258 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kBfrg-00008t-Ng for ged-emacs-devel@m.gmane-mx.org; Fri, 28 Aug 2020 11:00:28 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:56380) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kBfVy-0002h0-6w for emacs-devel@gnu.org; Fri, 28 Aug 2020 10:38:02 -0400 Original-Received: from quimby.gnus.org ([2a01:4f9:2b:f0f::2]:40028) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kBfVv-0007dd-Nj for emacs-devel@gnu.org; Fri, 28 Aug 2020 10:38:01 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=pIhzd/Lqx8SAWeHa6V/5CM+FRm/Z3g6UwK1NpNONMoA=; b=c0JQpo8sY5v2drfI9Q/22qCHmI dlkoWWG2YuWAjeWkktyh6qAiMsh7eTotOZBRy1lF68b4kciLWYQiJs4ILoM8VtI+Iai6cO1Ys9AI2 BDhHlPPFvp0Hzvfkgbf1+/f0e3BuoPn4ADOBNO65jRwajH10pXoVXW6bSefd0dimNLS0=; Original-Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=xo) by quimby with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1kBfVm-0003Gm-W5; Fri, 28 Aug 2020 16:37:53 +0200 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAABGdBTUEAALGPC/xhBQAAACBj SFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAALVBMVEUDAwUnIBVUSi5f XE9KNxwuLiurqYqXkWmcbR+jeDzW1afTrTs+Pj309Nv///8Q/LkRAAAAAWJLR0QOb70wTwAAAAd0 SU1FB+QIHA4kFxMbGbkAAAGbSURBVDjL5ZLPSwJBFMe/o+59xtp7GkGHDsYkXQwK7L7LMnXxEAQZ UaAutRF0KCIq/wEjOsRGUeCpIDOCQpYgvNZB8n/prZbFuv9A9Abmx/u8efPm8QXYsCRLJrPZWfFj HH/UlCkEwPo+EFnaPNwzERvdCYDoxcGNHz1wGwRX5VLyGdBKQbBcn/AB7CCoXI/kzBAQ278USljr kEFQPwf4lItGEDwWqKZJAeu3N0XgepxHnY9AOMVGLkb4VPuNQ+95TcYVV1GXo9oqGrAYFA0dWjrj mZ6YL3JWbRkcw15D5VQzBy2TVg0prQTX2nkDWFLSkjKtoJlg9AajpbpKmV0YjETCoIExOvvw1aXN Ir4aT0D4bTc6t0A/7wGw7o6N+bPeA8rUu8qLSLpF5ZodKVJVGUVGb8e7QEk6eooSe7ofAyub9jNY etMPVL0GaE5pBhCIB1XCNvIJztYx2Kefla2SPXf2XeKvDq85jr290C84fuo4TrsQAsq13aP36X6A 8l3lnof4cXJ/nIgPhYDth9rhVioEvDi2PfmEf2OfB6phSa7JzhIAAAAldEVYdGRhdGU6Y3JlYXRl ADIwMjAtMDgtMjhUMTQ6MzY6MjMrMDA6MDAYlfS5AAAAJXRFWHRkYXRlOm1vZGlmeQAyMDIwLTA4 LTI4VDE0OjM2OjIzKzAwOjAwachMBQAAAABJRU5ErkJggg== X-Now-Playing: Mike Oldfield's _Tubular Bells (2)_: "Tubular Bells Part One" In-Reply-To: (Qiantan Hong's message of "Fri, 28 Aug 2020 02:25:22 +0000") Received-SPF: pass client-ip=2a01:4f9:2b:f0f::2; envelope-from=larsi@gnus.org; helo=quimby.gnus.org X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache. That's all we know. X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:254355 Archived-At: Qiantan Hong writes: > The user script API makes it possible to reliable and predictable injecting > script into a Webkit Xwidget, which is useful for customizing the WebView > behavior. That sounds very useful. > The script message handler API makes it possible to trigger event in emacs > from JavaScript, and can be used to implement procedure calling from > js to elisp. Currently only the other way around is possible. That sounds really scary, though. What are the security implications here? Anyway, this is a larger large patch, so to apply it to Emacs, we'd have to have a copyright assignment to the FSF. Would you be willing to sign such paperwork? -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no