[webkit-dev] Security advice for linux browsers based on WebKit

[Adam Barth]

On Mon, Aug 24, 2009 at 10:23 AM, Serge
Noiraud<Serge.Noiraud at laposte.net> wrote:
> I'm writing a webkit application which use only local files ( gramps-project
> )
> I use python-webkit and pywebkitgtk. This is not a browser for the user.
>
> If I understand correctly, in a near futur, my application will not work.
> Is there a way to avoid this kind of problem ?

If you use only local files, you should be fine.  The change we're
discussing is about the interaction between local files and network
resources.

> Can we authorize one application to use local files ?
>
> I use in python :
>
>       self.window = webkit.WebView()
>       settings = self.window.get_settings()
>       settings.set_property("enable-developer-extras", True)
>
> Can we set this property too ? and how ?
> Does this mean python-webkit and pywebkitgtk should take care of this ?

If you do run into trouble, you should try setting

Settings::setAllowUniversalAccessFromFileURLs

to true explicitly.  I'm not sure how/if that's exposed in
python-webkit, but I imagine it will be similar to
enable-developer-extras.

Adam