WebAPI/Security/Battery: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
No edit summary
No edit summary
 
(3 intermediate revisions by one other user not shown)
Line 1: Line 1:
== Battery API ===
== Battery API ==


General Use Cases: Adjust app behavior based upon power status
General Use Cases: Adjust app behavior based upon power status
Line 25: Line 25:
! Notes & Other Controls
! Notes & Other Controls
|-  
|-  
| Web Content || None || No access
| Web Content || Same as general || Unrestricted ||
|-  
|-  
| Installed Web Apps || None || No access
| Installed Web Apps || Same as general || Unrestricted ||
|-  
|-  
| Privileged Web Apps || None || No access
| Privileged Web Apps || Same as general || Unrestricted ||
|-  
|-  
| Certified Web Apps || Notify an app if the user is idle. || Implicit
| Certified Web Apps || Same as general || Unrestricted ||
|}
|}




Brief purpose of API:
__NOTOC__


 
[[Category:Web APIs]]
 
[[Category:Security]]
 
 
== Regular web content (unauthenticated) ==
Use cases: Same
 
Authorization model for normal content: Implicit
 
Authorization model for installed content: Implicit
 
Potential mitigations: None
 
== Privileged (approved by app store) ==
Use cases: Same
 
Authorization mode: Implicit
 
Potential mitigations: None
 
== Certified (system-critical apps) ==
Use cases: Same
 
Authorization model: Implicit
 
Potential mitigations: None
 
== Notes ==
Should have a setting to disable this in privacy settings
 
__NOTOC__

Latest revision as of 23:40, 1 October 2014

Battery API

General Use Cases: Adjust app behavior based upon power status

Reference:

Note from the W3C spec: 

The API defined in this specification is used to determine the battery
status of the hosting device. The information disclosed has minimal
impact on privacy or fingerprinting, and therefore is exposed without  
permission grants. For example, authors cannot directly know if there is
a battery or not in the hosting device.

Inherent threats: Fingerprinting, abuse of battery?

Threat severity: Low

Type Use Cases Authorization Model Notes & Other Controls
Web Content Same as general Unrestricted
Installed Web Apps Same as general Unrestricted
Privileged Web Apps Same as general Unrestricted
Certified Web Apps Same as general Unrestricted
Retrieved from "https://wiki.mozilla.org/index.php?title=WebAPI/Security/Battery&oldid=1021331"