zotero/zotero — pull request #18 by ajlyon (2011-12-14 07:37:32+00:00)
Title: [Don't merge] Fix for TinyMCE image embedding

I think I did about all we need on the TinyMCE side to restore the insertion of local attachments into notes (see attached; it depends on a quirk that happens to put the original path in the ```alt``` attribute); now we're running into a new security error:

Security Error: Content at jar:file:///home/ajlyon/.mozilla/firefox/jlm2qjtg.Demo/extensions/zotero@chnm.gmu.edu/chrome/zotero.jar!/content/zotero/tinymce/note.html may not load or link to zotero://attachment/7749/.

As I understand it, ```note.html``` is unprivileged (the big switch for 84f59ab451c2cfd38ab4955c609580fe1630524a), so this error is somewhat surprising-- is it really the case that all local attachments are opened in the chrome context? I don't know much about the privileging model of XUL, but it seems like the privileges of notes and of user attachments should be the same.

It used to be possible to make the images appear by editing the HTML or using TinyMCE's image editor, but that also triggers the error above now.

This is a quite valuable, albeit little-known, feature of Zotero, and I'd like to see it working again.