Andrej Cimperšek - diploma

-------------------------------------------------------------------------------

DojoX Secure

-------------------------------------------------------------------------------

Version 0.1

Release date: 07/04/2008

-------------------------------------------------------------------------------

Project state:

alpha

-------------------------------------------------------------------------------

Project authors

	Kris Zyp (kris@sitepen.com)

-------------------------------------------------------------------------------

Project description

DojoX Secure is a collection of tools for security, in particular for working with

untrusted data and code. The following tools are a part of DojoX Secure:

dojox.secure.capability - Object-capability JavaScript validation. This is

a validator to run before eval to ensure that a script can't access or modify

any objects outside of those specifically provided to it.

dojox.secure.sandbox - Provides support for loading web pages, JSON, and scripts

from other domains using XHR (and XHR plugins) with a safe subset library and

sandboxed access to the DOM.

dojox.secure.DOM - Provides a DOM facade that restricts access to

a specified subtree of the DOM. The DOM facade uses getters/setters

and lettables to emulate the DOM API.

dojox.secure.OAuth - Future project to provide an implementation of OAuth.

-------------------------------------------------------------------------------

Dependencies:

Dojo Core (package loader).

-------------------------------------------------------------------------------

Documentation

-------------------------------------------------------------------------------

Installation instructions

Grab the following from the Dojo SVN Repository:

http://svn.dojotoolkit.org/var/src/dojo/dojox/trunk/secure/*

Install into the following directory structure:

/dojox/secure/

...which should be at the same level as your Dojo checkout.