[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] Add user content APIs for WebKit Xwidgets
From: |
Richard Stallman |
Subject: |
Re: [PATCH] Add user content APIs for WebKit Xwidgets |
Date: |
Sat, 29 Aug 2020 00:07:59 -0400 |
[[[ To any NSA and FBI agents reading my email: please consider ]]]
[[[ whether defending the US Constitution against all enemies, ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]
> > The script message handler API makes it possible to trigger event in emacs
> > from JavaScript, and can be used to implement procedure calling from
> > js to elisp. Currently only the other way around is possible.
> That sounds really scary, though. What are the security implications
> here?
That is an important concern.
Another importan concern: what are the moral implications of making
Emacs a platform for running nonfree Javascript code that users get
from web sites? It looks like that has in effect already been done;
is that so?
There should have been a discussion about _whether_ Emacs should
support that, and if so, how to include something comparable to
LibreJS.
--
Dr Richard Stallman
Chief GNUisance of the GNU Project (https://gnu.org)
Founder, Free Software Foundation (https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)