Friday, October 23, 2009

Google Wave And NoScript

One nuisance that I've encountered with Google Wave preview, is that some extensions and NoScript Firefox addon don't get along too well. The extensions are not hosted on Google's servers which triggers NoScript's cross site scripting blocker, unless you add that server to NoScript's whitelist.

Wave's developers will need to address this. While it is only a nuisance now, as more extensions become available, it will become a security problem. Having to whitelist every third party extension site is an opportunity just begging to be exploited.

No comments:

Post a Comment