Quote:
Originally Posted by KevinH
And what is to keep the evil epub developer from simply using a "sigl" or calibre's FAKE_PROTOCOL scheme url to do what they want. Isn't this just moving the problem? It would be quite easy for a javascript to to get the current page url, find the newly trusted protocol/scheme and create a url using it, wouldn't it?
|
And in your implementation of the new protocol you deny access to all resources that are not part of the book.