| 1 | ------------------------------------------------------------------------------- |
|---|
| 2 | DojoX Secure |
|---|
| 3 | ------------------------------------------------------------------------------- |
|---|
| 4 | Version 0.1 |
|---|
| 5 | Release date: 07/04/2008 |
|---|
| 6 | ------------------------------------------------------------------------------- |
|---|
| 7 | Project state: |
|---|
| 8 | alpha |
|---|
| 9 | ------------------------------------------------------------------------------- |
|---|
| 10 | Project authors |
|---|
| 11 | Kris Zyp (kris@sitepen.com) |
|---|
| 12 | ------------------------------------------------------------------------------- |
|---|
| 13 | Project description |
|---|
| 14 | |
|---|
| 15 | DojoX Secure is a collection of tools for security, in particular for working with |
|---|
| 16 | untrusted data and code. The following tools are a part of DojoX Secure: |
|---|
| 17 | |
|---|
| 18 | dojox.secure.capability - Object-capability JavaScript validation. This is |
|---|
| 19 | a validator to run before eval to ensure that a script can't access or modify |
|---|
| 20 | any objects outside of those specifically provided to it. |
|---|
| 21 | |
|---|
| 22 | dojox.secure.sandbox - Provides support for loading web pages, JSON, and scripts |
|---|
| 23 | from other domains using XHR (and XHR plugins) with a safe subset library and |
|---|
| 24 | sandboxed access to the DOM. |
|---|
| 25 | |
|---|
| 26 | dojox.secure.DOM - Provides a DOM facade that restricts access to |
|---|
| 27 | a specified subtree of the DOM. The DOM facade uses getters/setters |
|---|
| 28 | and lettables to emulate the DOM API. |
|---|
| 29 | |
|---|
| 30 | dojox.secure.OAuth - Future project to provide an implementation of OAuth. |
|---|
| 31 | |
|---|
| 32 | |
|---|
| 33 | ------------------------------------------------------------------------------- |
|---|
| 34 | Dependencies: |
|---|
| 35 | |
|---|
| 36 | Dojo Core (package loader). |
|---|
| 37 | ------------------------------------------------------------------------------- |
|---|
| 38 | Documentation |
|---|
| 39 | |
|---|
| 40 | ------------------------------------------------------------------------------- |
|---|
| 41 | Installation instructions |
|---|
| 42 | |
|---|
| 43 | Grab the following from the Dojo SVN Repository: |
|---|
| 44 | http://svn.dojotoolkit.org/var/src/dojo/dojox/trunk/secure/* |
|---|
| 45 | |
|---|
| 46 | Install into the following directory structure: |
|---|
| 47 | /dojox/secure/ |
|---|
| 48 | |
|---|
| 49 | ...which should be at the same level as your Dojo checkout. |
|---|
| 50 | |
|---|
