Im looking for security information regarding running a XUL
application from a webserver (Microsoft IIS to be exact). Im looking
for information about, but not limited to, applications that are
non-digitally signed and not installed in the chrome
system. So far I am only really aware of Mozilla's "same domain"
policy which constricts an application from Getting a xml file from
another domain using XmlHttprequest, but this is the sort of security
information im looking for. Ideally, im after a page or list that
explains exactly what can and cant be done, but any information would
be helpful.