Confirmed users
152
edits
(add get in touch section) |
(add good practices section) |
||
| Line 13: | Line 13: | ||
'''Get in touch with us early''' | '''Get in touch with us early''' | ||
Let us know you're starting to work on a feature. Depending on its size, implementing a security feature usually involve important designing decisions which has to be worked on with several teams: platform, Gaia, UX, security. | Let us know you're starting to work on a feature. Depending on its size, implementing a security feature usually involve important designing decisions which has to be worked on with several teams: platform, Gaia, UX, security. It is also the perfect way to know if other people are working on similar or related features. | ||
You can start by contacting us, we will help you get in touch with the right people: | You can start by contacting us, we will help you get in touch with the right people: | ||
* IRC channel #FxOSSec on irc.mozilla.org | * IRC channel #FxOSSec on irc.mozilla.org | ||
| Line 21: | Line 21: | ||
* on [https://bugzilla.mozilla.org/ Bugzilla] if the feature already has a bug ticket open. | * on [https://bugzilla.mozilla.org/ Bugzilla] if the feature already has a bug ticket open. | ||
* on the [https://lists.mozilla.org/listinfo/dev-b2g dev-b2g] and [https://lists.mozilla.org/listinfo/dev-gaia dev-gaia] mailing lists | * on the [https://lists.mozilla.org/listinfo/dev-b2g dev-b2g] and [https://lists.mozilla.org/listinfo/dev-gaia dev-gaia] mailing lists | ||
''' Learn how to use Bugzilla ''' | |||
You'll find plenty of useful resources on [https://developer.mozilla.org/en-US/docs/Mozilla/Bugzilla MDN], especially about [https://developer.mozilla.org/en-US/docs/Mozilla/Developer_guide/How_to_Submit_a_Patch how to submit a patch]. | |||
'''Ask for feedback early''' | |||
It is recommended you ask for feedback early, if possible as soon as you have a working prototype (you can use the "feedback" tag on Bugzilla). This will enable you to make sure everybody (UX, OS, security people) is aware and agrees on the direction you're taking with your implementation, and you'll possibly receive good advice for the remaining implementation work. | |||
== Writing security web apps == | == Writing security web apps == | ||