[Mono-bugs] [Bug 378982] New: Downloader needs an (security) overhaul

bugzilla_noreply at novell.com bugzilla_noreply at novell.com
Thu Apr 10 20:25:20 EDT 2008


           Summary: Downloader needs an (security) overhaul
           Product: Moonlight
           Version: 1.0.0
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: engine
        AssignedTo: mono-bugs at lists.ximian.com
        ReportedBy: rkvinge at novell.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---

We do not enforce any URL Access policies

- It looks like SetSource (in any of the types which has a SetSource) can't be
called with a Downloader that hasn't finished downloading. This would simplify
our code a lot.

MSDN (http://msdn2.microsoft.com/en-us/library/bb979889.aspx) says (about the
downloader argument for MediaElement::SetSource): "The Downloader object that
contains the downloaded content."

I have not been able to call SetSource with a partially downloaded Downloader
either with SL, however I haven't found any docs explicitly saying that calling
SetSource with an unfinished downloader isn't allowed either.

Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.

More information about the mono-bugs mailing list