AJAX => APAX? Or: is there support for python in browsers?

Tim Roberts timr at probo.com
Fri Nov 18 00:01:50 EST 2005


aleax at mail.comcast.net (Alex Martelli) wrote:

>Tim Roberts <timr at probo.com> wrote:
>   ...
>> Internet Explorer will allow any registered ActiveScript language to be
>> used in a web page.  Python qualifies.  In the latest Win32 extensions,
>> there is a script in win32comext/axscript/client/pyscript.py that will
>> register Python as an ActiveScript language.
>> 
>> The you can say
>> 
>>   <script language="python">
>>   print "<h1>Hello, there.</h1>"
>>   </script>
>
>Out of curiosity, how "sandboxed" is this Python?  I remember a similar
>solution being withdrawn once because it wasn't really safely sandboxed,
>so the ``script'' could easily do any arbitrary damage to the machine...

I remember this as well.  I thought the holes were largely plugged, but I
admit to losing track of the discussion.  Is Mark Hammond in the viewing
audience?

One of the compromises is that the pywin32 installer does not perform this
registration automatically.  The script is present, but you have to run the
registration script yourself.
-- 
- Tim Roberts, timr at probo.com
  Providenza & Boekelheide, Inc.



More information about the Python-list mailing list