views:

70

answers:

0

Hello.

I have a website which uses some functionality implemented in the Firefox extension, which I developed. JavaScript script on one of my webpages requires UniversalXPConnect privilege for communicating with XPCOM component implemented in my Firefox extension.

By default, when my script tries to enable this privilege for accessing XPCOM component:

netscape.security.PrivilegeManager.enablePrivilege("UniversalXPConnect");

... the following error occurs:

Error: A script from "http://example.com" was denied UniversalXPConnect privileges.

To enable this privilege currently users need to manually edit "signed.applets.codebase_principal_support" setting in "about:config" Firefox page.

From this page: http://www.mozilla.org/projects/security/components/signed-scripts.html I learned that it is possible to explicitly sign my webpage containing script which requires this privilege. After I sign my script users will not need to manually edit above mentioned setting.

Website is hosted on Linux platform under Drupal CMS.

I would very much appreciate if you could give me detailed step-by-step instructions on how do I sign my script (what tools should I download, how to create certificate, etc.), such that after following your instructions editing about:config setting will not be necessary.

Thank you,

Naismith