[Webkit-unassigned] [Bug 94621] New: [BlackBerry] Add option to only add JavaScript object 'qnx' to private webviews

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=94621

           Summary: [BlackBerry] Add option to only add JavaScript object
                    'qnx' to private webviews
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit BlackBerry
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ben at meyerhome.net
                CC: tonikitoo at webkit.org


Currently the BlackBerry port is injecting the 'qnx' JavaScript object in every WebView to provide a way for JavaScript to callback out to native through an event.  This qnx object is injected in both WebViews that are used for interacting with local resources (local webpage) and WebViews that are used for displaying public webpages (aka http://www.google.com)

As long as the current codebase has a 'qnx' object there should be a way to enable/disable the injections so it can be turned off by default on WebView's loading public webpages to prevent any possible security risk.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.