Security/Reviews/Gaia/SystemMessageHandler: Difference between revisions

Jump to navigation Jump to search

Security/Reviews/Gaia/SystemMessageHandler (view source)

Revision as of 23:09, 25 March 2013

388 bytes removed ,  25 March 2013
Undo revision 641301 by Ptheriault (talk)
(Undo revision 641301 by Ptheriault (talk))
 
Line 167: Line 167:
===Code Review Notes===
===Code Review Notes===


=== Security Risks & Mitigating Controls ===
* Bluetooth file transfer contains malicious data (in contents or metadata)
** Need further investigation, and testing of bluetooth_transfer.js
* Wallpaper setting is a CSS url
**if this could be controlled, this may be an injection point (not sure what attack this would grant though really)
* Background App interferes with foreground app


=== Actions & Recommendations ===
=== Actions & Recommendations ===
Ptheriault
canmove, Confirmed users
1,220

edits

Retrieved from "https://wiki.mozilla.org/Special:MobileDiff/641302"

Navigation menu