39 messages in com.googlegroups.google-gadgets-apiRe: README: Authors of Inlined (type=...
FromSent OnAttachments
Dann (Google Employee)08 Nov 2007 10:03 
Bonstio (Guru)08 Nov 2007 10:48 
Matt (Guru)08 Nov 2007 12:49 
Bonstio (Guru)08 Nov 2007 15:18 
Dann (Google Employee)09 Nov 2007 14:42 
Dann (Google Employee)09 Nov 2007 15:17 
Bonstio (Guru)10 Nov 2007 02:51 
Bonstio (Guru)15 Nov 2007 10:56 
Simon16 Nov 2007 07:58 
Matt (Guru)16 Nov 2007 08:50 
Bonstio (Guru)18 Nov 2007 04:33 
Dann (Google Employee)26 Nov 2007 14:09 
Bonstio (Guru)27 Nov 2007 12:04 
Dann (Google Employee)07 Dec 2007 17:42 
Bonstio (Guru)08 Dec 2007 02:14 
Simon09 Dec 2007 02:11 
Dann (Google Employee)10 Dec 2007 08:20 
Simon10 Dec 2007 15:46 
javalizard14 Dec 2007 06:18 
javalizard16 Dec 2007 09:44 
javalizard19 Dec 2007 10:26 
RandomName19 Dec 2007 10:31 
Steven Edwards19 Dec 2007 10:51 
TheWis19 Dec 2007 11:33 
paru...@gmail.com19 Dec 2007 11:37 
Dan (Google Employee)19 Dec 2007 12:25 
javalizard19 Dec 2007 12:29 
Alex19 Dec 2007 13:26 
bria...@google.com19 Dec 2007 13:46 
Steven Edwards19 Dec 2007 14:13 
Alex19 Dec 2007 14:16 
Alex19 Dec 2007 14:35 
Alex19 Dec 2007 15:20 
Steven Edwards19 Dec 2007 15:57 
Gregor20 Dec 2007 03:49 
Bonstio (Guru)20 Dec 2007 04:37 
Gary17 Jan 2008 16:44 
RandomName20 Jan 2008 19:50 
Gregor21 Jan 2008 10:08 
Subject:Re: README: Authors of Inlined (type="html-inline") Gadgets
From:Bonstio (Guru) (bons@gmail.com)
Date:11/27/2007 12:04:32 PM
List:com.googlegroups.google-gadgets-api

Hi Dann. Yes, no worries I shall pursue this in the other group! Thanks

On Nov 26, 10:10 pm, "Dann (Google Employee)" <d.@google.com> wrote:

Hey Bonstio,

I hear your point, but I do think this is somewhat of a separate discussion. GAFYD has never supported inlined gadgets, and I'm sure there's reasons why the GAFYD team decided not to enable them. I'd recommend posting these concerns in the GAFYD discussion group as I imagine you'll find more answers there. The question of enabling inlined gadgets in other Google properties is more dependent on that specific property as opposed to gadgets as a whole. So unfortunately, I won't be able to help with this.

Sorry!

Dann

On Nov 10, 2:51 am, "Bonstio (Guru)" <bons@gmail.com> wrote:

I read in this group that inlined gadget were not supported in GAFYD. I wish they were :-/ The message says "Sorry, this module cannot be displayed, as it requires inlining but is provided by an untrusted source." I would just like to be able to add my gadget URL to the list of trusted sources.

I think that a domain admin for GAFYD takes over from Google's responsibility to proactively proetect users from potential attacks. If the GAFYD admin user deems a gadget as safe, then that's their decision and they should be able to pre-add whichever (currently existing) inlined gadget are required. This is not the same as allowing non-admin GAFYD from adding inlined gadgets.

I'm exploring this as I've recently been inundated with gadget requests for GAFYD and have just remembered from re-reading posts in this group that I will be unable to help out. Is there any possibility of this being changed before the switch is flipped please?

On Nov 9, 11:17 pm, "Dann (Google Employee)" <d.@google.com> wrote:

Hey Matt,

Thanks for the valuable feedback. Comments below:

Many of the gadgets I develop are for my own use - I don't even care if anyone else uses them. I find it very handy to use inlined gadgets because I can do more with them and I don't have to deal with the issues of iframes, resizing, etc. Inline gadgets just work better, IMO. Even if they aren't popular, what's the harm in allowing them to continue to be created? If users don't mind the security "risks" why reduce their choice? You're effectively turning of all access to skinning the igoogle page, correct?

You do bring up an interesting point. You may be right that some users don't mind the security risks, but part of our job is to pro- actively protect our users from potential attacks. It wasn't an easy decision to make, but the fact is that inlined gadgets has always compromised security in various ways. The truth is that many users do get scared away from the opt-in message that gets displayed when adding a third-party inlined gadget. So I do think we need to keep this in mind.

In addition to security, there are other complications and limitations surrounding inlined gadgets such as the inability to add them to other pages, etc. However, this is probably irrelevant to someone who really wants to use inlined gadgets for their own personal use.

1) Can I update the XML of an inlined gadget that already exists, once you have flipped the switch?

Yes. After the switch is flipped, you can continue to update inlined gadget as you normally would.

2) If so, can I add, say, 10 inlined gadgets right now as "placeholders" and then modify the XML in the future to create a different gadget?

Possibly, which is part of the reason why I posted the announcement in advance. However, I can't guarantee that they'll make it in since they'll probably have very low traffic. I'd go ahead and create them anyway as you might as well try.

3) Will inlined gadgets only continue to work if they exist in the directory? Or if I've added them by url, will they continue to work?

Inlined gadgets do not have to exist in the directory to be qualified although you should make sure they are getting some volume of traffic.

Would you consider opening that up a bit more and allowing iframe gadgets to do more things to their containing page? That would at least allow for skinning, gadgets with icons in their header bars, etc. If I couldn't use my skin gadget, iGoogle would be much less usable to me because of real estate issues, colors, etc.

Yes, technically this would be possible and may help with the transition. However I don't have any updates on whether this will be available in the near future. These are container-specific features that only apply to iGoogle. So there's naturally going to be some debate over how useful this would be to the general public.

Hope this helps,