"signed applets codebase_principal_support"

Discussion of general topics about Mozilla Firefox
Post Reply
naotachannel
Posts: 50
Joined: March 24th, 2008, 9:32 am

"signed applets codebase_principal_support"

Post by naotachannel »

There's a theme I would like to install, but the author says to set "signed applets codebase_principal_support" to true -

Is that a good idea?
User avatar
Gingerbread Man
Posts: 7735
Joined: January 30th, 2007, 10:55 am

Re: "signed applets codebase_principal_support"

Post by Gingerbread Man »

Give scripts using codebase principals access advanced scripting capabilities. Setting this preference to "true" is often used to allow IRC websites to gain access to the OS's clipboard at the expense of a security risk.

about:config entries.

Note that you only need to enable that preference if you want to configure the Noia theme; you can use it with the default settings without any about:config preference.
naotachannel
Posts: 50
Joined: March 24th, 2008, 9:32 am

Re: "signed applets codebase_principal_support"

Post by naotachannel »

There's no way to configure it without posing a security risk?

Are there any other themes that do that?
User avatar
Frank Lion
Posts: 21173
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom
Contact:

Re: "signed applets codebase_principal_support"

Post by Frank Lion »

naotachannel wrote:There's no way to configure it without posing a security risk?

Don't use the theme's theme options, if it bothers you that much.

Are there any other themes that do that?

Yep, every other theme that offers theme users, er, theme options. Do you know what part of Firefox a theme needs to access to do this? - userChrome.css (and in the past, userContent.css). That is the total sum of 'security risk'.
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)
.
naotachannel
Posts: 50
Joined: March 24th, 2008, 9:32 am

Re: "signed applets codebase_principal_support"

Post by naotachannel »

Well - if it's not a security risk, then maybe Mozilla should stop saying that it is.

Anyway - I looked at over 100 themes, and couldn't find any others that want the user to change anything in about:config, so if you know of some I didn't see Frank. please tell me what they are.
Anonymosity
Posts: 8779
Joined: May 7th, 2007, 12:07 pm

Re: "signed applets codebase_principal_support"

Post by Anonymosity »

What sort of things do you configure in a theme? The ones I use just install without any option to set anything in the theme.
User avatar
Gingerbread Man
Posts: 7735
Joined: January 30th, 2007, 10:55 am

Re: "signed applets codebase_principal_support"

Post by Gingerbread Man »

Anonymosity wrote:What sort of things do you configure in a theme?

Image

Other themes have additional features that can only be enabled by manually adding a stylesheet to userContent.css (e.g. Silvermel, see revision 2499).
Anonymosity
Posts: 8779
Joined: May 7th, 2007, 12:07 pm

Re: "signed applets codebase_principal_support"

Post by Anonymosity »

I see. Thanks for the info. I do configure themes, but I do it by editing stylesheets from the archive, and in some cases, images also.
Post Reply