Re: XForms: urlencoded-post encoding wrong?

Eric Hanson wrote:
> Gotcha.  It was the security check.  I moved the doc and all works
> great now.
> 
> What's the status of this behavior?  For the application I'm working on
> this is pretty close to a show stopper.  I'm trying to make an app
> where xforms hosted potentially all over the web post to repositories
> on other hosts.  Any hope of getting around this?
> 
> Thanks,
> Eric
> 

Sorry Eric, I started a reply yesterday and got sidetracked and didn't 
get it finished.  Here it is:

Looks like it is here to stay unless Mozilla changes their minds at some
future date.  Here is the Mozilla security policy that is currently 
limiting us: 
http://lxr.mozilla.org/mozilla/source/extensions/webservices/docs/New_Security_Model.html

Given the current state of user uncertainty surrounding browser security 
in general, I can't really fault Mozilla for this conservative approach. 
  When we ship our final version, we hope to support a whitelisting pref 
or some way for the user to set his trust level.  We are also going to 
try to get the 'xml file on the server' approach some more exposure and 
hopefully it'll get some wider adoption among servers that are expecting 
XML-based interaction with clients.  Though the format may be different 
than what is mentioned in the security model document under 'Delegation'.

Is this going to kill your application idea?  Or will you have influence 
enough with the 'repositories on other hosts' to maybe get them to adopt 
the xml file approach.  If so, we'd like your feedback when we have it 
firmed up a bit more.

Thanks,
--Aaron