Subj : Re: [SpiderMonkey]Export/import statements bug in new release of
To   : David
From : Brendan Eich
Date : Thu Jul 08 2004 03:26 pm

David wrote:
> Hello,
> 
> I found a bug in the new javascript 1.5 version of SpiderMonkey. If you 
> try to use the export/import statements (which are very usefull if you 
> using security scripts in dynamic page generation context), the new 
> version of mozilla (1.7) does not reconize anymore thoses statements 
> whereas the version 1.6 does.
> 
> I saw in http://lxr.mozilla.org/mozilla/source/js/src/jsconfig.h#457 
> that this functionnality seems to be desactivated in new 1.5 javascript 
> version, is this normal ?


Argh.  I turned off this support via the jsconfig.h macro to save code 
footprint.  I didn't know people still used it.


> Is there a another way to call a signed javascript function in a 
> non-signed html page ?


In 1.6, did signed scripts work for you?  That is, could they enable 
privileges and so on, and do whatever they did that worked in Netscape 4.x?


> I've signal a bug http://bugzilla.mozilla.org/show_bug.cgi?id=249211 at 
> the end of last month, but I haven't got any reply for the moment...


I'll comment there now.


> For thoses who are interested in writing signed Javascript functions : 
> http://developer.netscape.com/docs/manuals/communicator/jssec/contents.html
> 
> Please help, we are stuck with this problem since 2 weeks.


I can get you a fix for 1.7.x with a little help from my driver friends.

/be

.