Security/Reviews/Gaia/pdfjs

App Review Details

• App: PDF Viewer
• Review Date: Sep13
• Review Lead: mgoodwin
• Latest commit: https://github.com/mozilla-b2g/gaia/commit/2216eb383b005b9f6159f2b04fd7400f4f2641af

Overview

Architecture

Components

Relevant Source Code

Permissions

Web Activity Handlers

Web Activity Usage

Notable Event Handlers

Code Review Notes

1. XSS & HTML Injection attacks

2. Secure Communications

3. Secure data storage

4. Denial of Service

5. Use of Privileged APIs

6. Interfaces with other Apps/Content

Security Risks & Mitigating Controls

Actions & Recommendations