Bureaucrats, canmove, Confirmed users
647
edits
Security/Reviews/Firefox4/IndexedDB Security Review: Difference between revisions
Jump to navigation
Jump to search
m
Security/Reviews/Firefox4/IndexedDB Security Review (view source)
Revision as of 21:57, 30 September 2010
, 30 September 2010→Review comments
| Line 98: | Line 98: | ||
* Currently 3rd-party content (frames) can use databases. We want to block 3rd party because it's easier to loosen restrictions than the reverse. {{bug|595307}} | * Currently 3rd-party content (frames) can use databases. We want to block 3rd party because it's easier to loosen restrictions than the reverse. {{bug|595307}} | ||
** we need to check that it's same-origin all the way to the top-most frame if we do this. | ** we need to check that it's same-origin all the way to the top-most frame if we do this. | ||
* Users are prompted before using database (per origin) -- they must opt in. | |||
* Users are prompted again if the origin uses more than <Quota> megabytes. | |||
** currently Quota is 50Mb | |||
** if users OK exceeding quota then space is unlimited | |||