Confirmed users
717
edits
Security/Features: Difference between revisions
Jump to navigation
Jump to search
→Process Isolation
| Line 213: | Line 213: | ||
'''Design''': In Process. | '''Design''': In Process. | ||
https://wiki.mozilla.org/Electrolysis | |||
''Goals'' | ''Goals'' | ||
* Create infrastructure to allow process separation within Firefox | * Create infrastructure to allow process separation within Firefox | ||
* Put plugins in a separate process for stability reasons | |||
* Create separate content processes for stability and performance reasons | * Create separate content processes for stability and performance reasons | ||
* Implemented isolated processes to reduce the damage for various types of vulnerabilities | * Implemented isolated processes to reduce the damage for various types of vulnerabilities | ||
| Line 233: | Line 236: | ||
* {{done|Develop [[Security/ProcessIsolation/ThreatModel|threat model]]}} | * {{done|Develop [[Security/ProcessIsolation/ThreatModel|threat model]]}} | ||
'''Review and Standardization''': | '''Review and Standardization''': | ||
* IPD: https://wiki.mozilla.org/IPDL | |||
* Pepper API could allow for sandboxed plugins: https://wiki.mozilla.org/Plugins:PlatformIndependentNPAPI | |||
'''Prototype''': In Process. | '''Prototype''': In Process. | ||
* [[Content_Processes/Build|Build Instructions for Prototype]] | * [[Content_Processes/Build|Build Instructions for Prototype]] | ||
'''Implementation''': | '''Implementation''': | ||
''Phases'' | |||
https://wiki.mozilla.org/Electrolysis#Implementation | |||
* Plugin process separation - due to ship in Lorentz | |||
* Out of process tabs - in process | |||
* Add-on multi-process support and compatibility | |||
* Performance, caching, process pools | |||
* Sandboxing, of content processes and hopefully plugins | |||
== <tt>X-Frame-Options</tt> == | == <tt>X-Frame-Options</tt> == | ||