874
edits
(Added a {{draft}} marker at top) |
(Added link to adrienne's paper) |
||
| Line 207: | Line 207: | ||
The above manifest distinguishes between Superpowers, Libraries, and Sandboxes—rather than lumping them all into one category, which is easier to write—because each type has different security characteristics that are important for Jetpack authors to think about and be aware of. Superpowers represent code that the Jetpack author trusts as much as the Mozilla platform itself, possibly even more than their own code; Libraries represent code that the Jetpack author trusts at least as much as their own code; and Sandboxes represent code that the author trusts more, less, or just as much as their own, depending on how the Sandboxes are configured and used. | The above manifest distinguishes between Superpowers, Libraries, and Sandboxes—rather than lumping them all into one category, which is easier to write—because each type has different security characteristics that are important for Jetpack authors to think about and be aware of. Superpowers represent code that the Jetpack author trusts as much as the Mozilla platform itself, possibly even more than their own code; Libraries represent code that the Jetpack author trusts at least as much as their own code; and Sandboxes represent code that the author trusts more, less, or just as much as their own, depending on how the Sandboxes are configured and used. | ||
== References == | |||
[http://www.eecs.berkeley.edu/Pubs/TechRpts/2009/EECS-2009-139.pdf Adrienne Porter Felt, A Survey of Firefox Extension API Use (PDF)], IEEE Technical Report No. UCB/EECS-2009-139. October 2009. | |||
edits