canmove, Confirmed users, Bureaucrats and Sysops emeriti
1,334
edits
Firefox3.1/Media Queries Security Review: Difference between revisions
Jump to navigation
Jump to search
Firefox3.1/Media Queries Security Review (view source)
Revision as of 15:52, 29 August 2008
, 29 August 2008fill in the easy parts
(start with the template) |
(fill in the easy parts) |
||
| Line 3: | Line 3: | ||
;Background links | ;Background links | ||
* | * {{bug|156716}} | ||
* | * [http://dev.w3.org/csswg/css3-mediaqueries/ css3-mediaqueries Editor's Draft] | ||
== Security and Privacy == | == Security and Privacy == | ||
* What security issues do you address in your project? | * What security issues do you address in your project? | ||
** parsing of and data structures representing syntax coming off the Web | |||
* Is system or subsystem security compromised in any way if your project's configuration files / prefs are corrupt or missing? | * Is system or subsystem security compromised in any way if your project's configuration files / prefs are corrupt or missing? | ||
** no configuration files or prefs | |||
* Include a thorough description of the security assumptions, capabilities and any potential risks (possible attack points) being introduced by your project. | * Include a thorough description of the security assumptions, capabilities and any potential risks (possible attack points) being introduced by your project. | ||
** parsing and data structures (MORE HERE) | |||
** ability to learn about device capabilities (MORE HERE) | |||
== Exported APIs == | == Exported APIs == | ||
* Please provide a table of exported interfaces (APIs, ABIs, protocols, UI, etc.) | * Please provide a table of exported interfaces (APIs, ABIs, protocols, UI, etc.) | ||
* Does it interoperate with a web service? How will it do so? | * Does it interoperate with a web service? How will it do so? | ||
** no | |||
* Explain the significant file formats, names, syntax, and semantics. | * Explain the significant file formats, names, syntax, and semantics. | ||
* Are the externally visible interfaces documented clearly enough for a non-Mozilla developer to use them successfully? | * Are the externally visible interfaces documented clearly enough for a non-Mozilla developer to use them successfully? | ||
| Line 20: | Line 25: | ||
== Module interactions == | == Module interactions == | ||
* What other modules are used (REQUIRES in the makefile, interfaces) | * What other modules are used (REQUIRES in the makefile, interfaces) | ||
** gfx and widget code to query device capabilities | |||
== Data == | == Data == | ||
| Line 32: | Line 38: | ||
== Configuration == | == Configuration == | ||
* Can the end user configure settings, via a UI or about:config? Hidden prefs? Environment variables? | * Can the end user configure settings, via a UI or about:config? Hidden prefs? Environment variables? | ||
** no | |||
* Are there build options for developers? [#ifdefs, ac_add_options, etc.] | * Are there build options for developers? [#ifdefs, ac_add_options, etc.] | ||
** no | |||
* What ranges for the tunable are appropriate? How are they determined? | * What ranges for the tunable are appropriate? How are they determined? | ||
** N/A | |||
* What are its on-going maintenance requirements (e.g. Web links, perishable data files)? | * What are its on-going maintenance requirements (e.g. Web links, perishable data files)? | ||
** N/A | |||
== Relationships to other projects == | == Relationships to other projects == | ||