locked
Remote file inclusion RRS feed

  • Question

  • Hello everybody.

    I started using jQuery and it worked very well, but when I ran WACK, I received some security errors on jquery file.

    My question is:

    Can I include a remote file like that: <script src="http://www.site.com/myFile.js" type="text/javascript" language="javascript"></script>

    and pass the certification?

    Thank you :) Sergio

    Wednesday, December 19, 2012 8:15 AM

Answers

  • You can't pass certification if you load a remote JS file, because it can't be assured that you (or someone else) won't change that file in the future altering the App behavior in a way that won't comply with some of the rules.

    http://msdn.microsoft.com/en-us/library/windows/apps/hh694083.aspx

    Point 3.9:

    3.9 All app logic must originate from, and reside in, your app package

    Your app must not attempt to change or extend the packaged content through any form of dynamic inclusion of code or data that changes how the application interacts with the Windows Runtime, or behaves with regard to Store policy. It is not permissible, for example, to download a remote script and subsequently execute that script in the local context of your app package.

    • Marked as answer by SergiusXP Wednesday, December 19, 2012 1:01 PM
    Wednesday, December 19, 2012 12:48 PM

All replies

  • You can't pass certification if you load a remote JS file, because it can't be assured that you (or someone else) won't change that file in the future altering the App behavior in a way that won't comply with some of the rules.

    http://msdn.microsoft.com/en-us/library/windows/apps/hh694083.aspx

    Point 3.9:

    3.9 All app logic must originate from, and reside in, your app package

    Your app must not attempt to change or extend the packaged content through any form of dynamic inclusion of code or data that changes how the application interacts with the Windows Runtime, or behaves with regard to Store policy. It is not permissible, for example, to download a remote script and subsequently execute that script in the local context of your app package.

    • Marked as answer by SergiusXP Wednesday, December 19, 2012 1:01 PM
    Wednesday, December 19, 2012 12:48 PM
  • Thabk you for your detailed answer :)
    Wednesday, December 19, 2012 1:01 PM
  • Most welcome :)
    Wednesday, December 19, 2012 2:49 PM