Entry
How to run trusted scripts with NN4?
Feb 3rd, 2000 01:40
Martin Honnen, http://developer.netscape.com/docs/technote/security/sectn2.html
NN4 has a combined java and javascript security api that allows applets
and javascript scripts to request certain privileges the default
security settings don't allow (local file access, cross domain
scripting, browser setting change).
This api calls are possible for locally run scripts (loaded via file:
url) without taking further steps, so if you want to run scripts just
locally you can greatly expand the power of javascript with calls to
netscape.security.PrivilegeManager.enablePrivilege('PrivilegeName');
To allow the same for scripts loaded from a http server (via http: url)
you can add a preference in NN4. Quit the browser and look for the
pref.js file (on Win) or preferences.js (on Unix) file and add the
following line:
user_pref("signed.applets.codebase_principal_support", true);
Be aware of the risks described in the article at above url.