-------------------------------------------------------------------------------
DojoX Secure
-------------------------------------------------------------------------------
Version 0.1
Release date: 07/04/2008
-------------------------------------------------------------------------------
Project state:
alpha
-------------------------------------------------------------------------------
Project authors
Kris Zyp (kris@sitepen.com)
-------------------------------------------------------------------------------
Project description
DojoX Secure is a collection of tools for security, in particular for working with
untrusted data and code. The following tools are a part of DojoX Secure:
dojox.secure.capability - Object-capability JavaScript validation. This is
a validator to run before eval to ensure that a script can't access or modify
any objects outside of those specifically provided to it.
dojox.secure.sandbox - Provides support for loading web pages, JSON, and scripts
from other domains using XHR (and XHR plugins) with a safe subset library and
sandboxed access to the DOM.
dojox.secure.DOM - Provides a DOM facade that restricts access to
a specified subtree of the DOM. The DOM facade uses getters/setters
and lettables to emulate the DOM API.
dojox.secure.OAuth - Future project to provide an implementation of OAuth.
-------------------------------------------------------------------------------
Dependencies:
Dojo Core (package loader).
-------------------------------------------------------------------------------
Documentation
-------------------------------------------------------------------------------
Installation instructions
Grab the following from the Dojo SVN Repository:
http://svn.dojotoolkit.org/var/src/dojo/dojox/trunk/secure/*
Install into the following directory structure:
/dojox/secure/
...which should be at the same level as your Dojo checkout.
8398c9048d