Confirmed users
717
edits
Apps/Security: Difference between revisions
Jump to navigation
Jump to search
→Why create a "privileged" application type?
| Line 74: | Line 74: | ||
* The app will have to be reviewed by the store. Including reviewing all of the code that makes up the app. | * The app will have to be reviewed by the store. Including reviewing all of the code that makes up the app. | ||
* The app will be signed by the store to ensure that hacking the store website doesn't allow a hacker to install arbitrary content on users devices. | * The app will be signed by the store to ensure that hacking the store website doesn't allow a hacker to install arbitrary content on users devices. | ||
* The app will use a CSP policy to harden the app itself against bugs which would allow an attacker to inject code into the app. This will also make reviewing the app easier. | * The app will use a [https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html CSP] policy to harden the app itself against bugs which would allow an attacker to inject code into the app. This will also make reviewing the app easier. | ||
==== Default CSP policy ==== | ==== Default CSP policy ==== | ||