WebAPI/Security/NetworkInfo

From MozillaWiki
Jump to: navigation, search

Network Information API

Brief purpose of API: Allow content to understand if current network connectivity is metered in order to allow apps to limit consumption.

API Endpoint: navigator.connection.*

General Use Cases:

  • Read current bandwidth estimate or ask if connection is metered
  • Listen for connection change events

Inherent threats: Privacy (de-anonymize users based on connection change events?)

References:

Threat severity: Low

Permissions Table

Type Use Cases Authorization Model Notes & Other Controls
Web Content As per general use cases above. No permission required
Installed Web Apps As per general use cases above. No permission required
Privileged Web Apps As per general use cases above. No permission required
Certified Web Apps As per general use cases above. No permission required