README


-------------------------------------------------------------------------------
DojoX Secure
-------------------------------------------------------------------------------
Version 0.1
Release date: 07/04/2008
-------------------------------------------------------------------------------
Project state:
alpha
-------------------------------------------------------------------------------
Project authors
	Kris Zyp (kris@sitepen.com)
-------------------------------------------------------------------------------
Project description

DojoX Secure is a collection of tools for security, in particular for working with
untrusted data and code. The following tools are a part of DojoX Secure:

dojox.secure.capability - Object-capability JavaScript validation. This is 
a validator to run before eval to ensure that a script can't access or modify
any objects outside of those specifically provided to it.

dojox.secure.sandbox - Provides support for loading web pages, JSON, and scripts 
from other domains using XHR (and XHR plugins) with a safe subset library and 
sandboxed access to the DOM.

dojox.secure.DOM - Provides a DOM facade that restricts access to
a specified subtree of the DOM. The DOM facade uses getters/setters
and lettables to emulate the DOM API.

dojox.secure.OAuth - Future project to provide an implementation of OAuth.


-------------------------------------------------------------------------------
Dependencies:

Dojo Core (package loader).
-------------------------------------------------------------------------------
Documentation

-------------------------------------------------------------------------------
Installation instructions

Grab the following from the Dojo SVN Repository:
http://svn.dojotoolkit.org/var/src/dojo/dojox/trunk/secure/*

Install into the following directory structure:
/dojox/secure/

...which should be at the same level as your Dojo checkout.