[pkg-wine-party] Bug#669672: Bug#669672: wine-gecko-unstable: embeds xulrunner

[Stephen Kitt <steve@sk2.org>]

Hi Michael,

On Fri, Apr 20, 2012 at 05:13:47PM -0400, Michael Gilbert wrote:
> This package uses an embedded copy of xulrunner.  This is bad practice
> in terms of security support.  I haven't really looked at how
> complicated it would be to use the shared lib version of xulrunner,
> but that would be far more ideal.

wine-gecko is a Windows DLL, so using the shared xulrunner library
would be impossible.

It would be nice though to be able to rebuild wine-gecko using
xulrunner's source whenever a security update is released... I
remember the security aspects of wine-gecko being discussed at some
point (either on wine-devel or on the Wine wiki) but I can't find the
references off the top of my head.

Regards,

Stephen