2
edits
Security/B2G/PermissionReview: Difference between revisions
Jump to navigation
Jump to search
Minor change
(Clock app added to the wiki) |
(Minor change) |
||
| Line 290: | Line 290: | ||
*** 2. set a flag to notify the system that there is alarms enabled. | *** 2. set a flag to notify the system that there is alarms enabled. | ||
==== How can we make | ==== How can we make Clock a hosted app? ==== | ||
Lets focus on the APIs not open to hosted content yet: | Lets focus on the APIs not open to hosted content yet: | ||
*audio-alarm-channel: though it is ok for using in Trusted apps, it might be possible to open the permission for all the hosted apps too, however we should notify the user showing a prompt perhaps, because the apps that use this permission will be able to play sound in a high priority channel. At first sight, it doesn't seem like a security risk, but more as an annoyance to the user if used maliciously. | *audio-alarm-channel: though it is ok for using in Trusted apps, it might be possible to open the permission for all the hosted apps too, however we should notify the user showing a prompt perhaps, because the apps that use this permission will be able to play sound in a high priority channel. At first sight, it doesn't seem like a security risk, but more as an annoyance to the user if used maliciously. | ||