On Feb 16, 2012, at 1:22 AM, Patrick Robertson wrote:

> As a follow up, it appears that in 10.7.3 Apple have included a further
> Console log message along the lines of:
> 
> 16/02/2012 08:12:28.319 sandboxd: ([23644]) WebProcess(23644) deny
> hid-control
> 
> 
> It appears that Sandboxed applications do not allow external applications
> to run the AXUIElementPostKeyboardEvent anymore.
> 
> Do people consider this to be reasonable/make sense? Somehow, I don't see
> how it's justifiable for a Sandboxed app to display this behaviour, and
> causes serious usability problems.

I have a bug filed on this, but I don't think Apple's ever going to allow use 
of the accessibility API or event posting from the sandbox. According to what 
I've read on the forums, allowing apps to do that is a sandbox-defeating 
security hole. Sandboxed apps aren't allowed to use NSAppleScript or AESend() 
to communicate with the outside world for the same reason. They get temporary 
exceptions, but the "temporary" means they might be taken away...

Nick Zitzmann
<http://www.chronosnet.com/>


_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to