Security/Reviews/Marionette

From MozillaWiki
Jump to: navigation, search
Please use "Edit with form" above to edit this page.

Item Reviewed

Marionette
Target Marionette


Introduce the Feature

Goal of Feature, what is trying to be achieved (problem solved, use cases, etc)

  • control and test remote machines
    • log in and drive a remote test system
  • use remote debugger protocol
    • runs at gecko level and listens for connections
    • all managed by remote debugger and client/server code
  • used in a similar fashion to selenium
  • only enabled in a build pref
    • then prefed on and then listens on the given port (2828) and uses the JSON protocol
  • Server: python client Marionet -Client
    • navigate, click on element, exec JS
  • can also run selenium tests

What solutions/approaches were considered other than the proposed solution?

  • build something new from the ground up

Why was this solution chosen?

  • already has support for the protocol and did not require a rewrite or new code

Any security threats already considered in the design and why?

`

Threat Brainstorming

'

Property "SecReview feature goal" (as page type) with input value "* control and test remote machines
    • log in and drive a remote test system
  • use remote debugger protocol
    • runs at gecko level and listens for connections
    • all managed by remote debugger and client/server code
  • used in a similar fashion to selenium
  • only enabled in a build pref
    • then prefed on and then listens on the given port (2828) and uses the JSON protocol
  • Server: python client Marionet -Client
    • navigate, click on element, exec JS
  • can also run selenium tests" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.

Action Items

Action Item Status Complete
Release Target Firefox 16
Action Items
WhoActionBy WhenCompleted date

[NEW] new [DONE] Done

[MISSED] Miss
marionette team bug 741812add verificaiton checking for AMO reivewersbefore code migrates to aurora[DONE] 2012-04-03
marionette team bug 741813prevent the default startup pref so it cannot be changed by adding a pref listener, and can only be enabled in prefs.js before code migrates to aurora[DONE] complete 2012-02-15