Gadgets should render from trusted 3rd-party sites. There should be one request per-site.

Comments

lisarex’s picture

lisarex commented

I've linked this from the Redesign project #661532: Meta issue for Dashboard because this issue was tagged 'drupal.org redesign'

Anonymous’s picture

Anonymous (not verified) commented
Assigned: Unassigned »
Priority: Normal » Minor

@drumm - what I was thinking here is giving users the ability to add their own widgets, that would include the ability to toss in OBJECT and EMBED tags.

Considering dashboards are specific to the user, I thought this would not make for a serious security challenge. It would reduce the need for trusted sites.

Any thoughts on this idea?

M

drumm’s picture

drumm
he/him
Location NY, US
commented

This is for trusted *.drupal.org sites. Grab cheat-sheets from API, conversations from groups, etc.

Anonymous’s picture

Anonymous (not verified) commented
Status: Active » Closed (duplicate)

Consolidating discussion about personalized widgets. I think this belongs there.

Conversation moved over to http://drupal.org/node/808450.

M