/    Sign up×
Community /Pin to ProfileBookmark

hot to codesign javascripts for ie

Fellow Developers,

does anyone known how I might sign javascripts for ie.

i have a microsoft authenticode code signing cert AND i have a sun 1.3+ JarSigner. I would rather get this accomplished NOT using the microsoft codesigner if possible.

I am deploying a java applet to an IE5+ environment:

Here is how it works:

index.html launches a childWindow (sort of a splash screen with the applet embedded). The child window launches a non-modal applet. I want to close the parent window from the child window using the javascript method window.close
Since the javascript is not signed, the user will be promped to close the window. I do not want this prompt to occur, thus…. how do I sign the javascript for ms internet explorer 5.5+.. I can find plenty of information about how to sign javascripts for netscape but this information doesnt apply to ie at all.

the signed applet is working fine with the sun jar signer, it would be greatly desirable if I could use the jar signer to somehow sign the javascript code as well so that I would have the JavaScript advanced browser permissions needed such as:

UniversalBrowserRead:
Reading of sensitive browser data.
This allows the script to pass the same origin check when reading from any document.

UniversalBrowserWrite:
Modification of sensitive browser data.
This allows the script to pass the same origin check when writing to any document.

UniversalXPConnect:
Unrestricted access to browser APIs using XPConnect.

UniversalPreferencesRead:
Read preferences using the navigator.preference method.

UniversalPreferencesWrite:
Set preferences using the navigator.preference method.

CapabilityPreferencesAccess:

Read/set the preferences which define security policies, including which privileges have been granted and denied to scripts. (You also need UniversalPreferencesRead/Write.)

UniversalFileRead:

window.open of file:// URLs.
Making the browser upload files from the user’s hard drive using <input type=”file”>.

Thanks so much for any experience you can share to help me solve this issue.

Kind Regards,

Alexander Petty

to post a comment
JavaScript

1 Comments(s)

Copy linkTweet thisAlerts:
@alexspettyauthorFeb 15.2003 — I realize now what I am really trying to do.

It is to find a way to bypass the "Same Origin" rule using codesigning on a script (maybe javascript, maybe JScript, Maybe vbscript.. i dont care which as long as it works on all ie5.5sp2+ browsers)

It is simple to do on netscape using whats called Signed Scripts... but there seems no microsoft equivalent.

Thanks again for any insight or input you may have on this issue.

-Alex
×

Success!

Help @alexspetty spread the word by sharing this article on Twitter...

Tweet This
Sign in
Forgot password?
Sign in with TwitchSign in with GithubCreate Account
about: ({
version: 0.1.9 BETA 5.18,
whats_new: community page,
up_next: more Davinci•003 tasks,
coming_soon: events calendar,
social: @webDeveloperHQ
});

legal: ({
terms: of use,
privacy: policy
});
changelog: (
version: 0.1.9,
notes: added community page

version: 0.1.8,
notes: added Davinci•003

version: 0.1.7,
notes: upvote answers to bounties

version: 0.1.6,
notes: article editor refresh
)...
recent_tips: (
tipper: @AriseFacilitySolutions09,
tipped: article
amount: 1000 SATS,

tipper: @Yussuf4331,
tipped: article
amount: 1000 SATS,

tipper: @darkwebsites540,
tipped: article
amount: 10 SATS,
)...