WebAPI/Security/MobileConnection: Difference between revisions

WebAPI/Security/MobileConnection (view source)

6 bytes removed , 1 October 2014

no edit summary

Confirmed users

1,340

edits

@@ Line 1: / Line 1: @@
-Name of API: Mobile Connection API
+== Mobile Connection API ==
-Reference:  https://wiki.mozilla.org/WebAPI/WebMobileConnection
 Brief purpose of API: This exposes information about the current mobile voice and data  connection to (certain) HTML content.
@@ Line 19: / Line 17: @@
 Threat severity: High
-== Regular web content (unauthenticated) ==
+References:
-Use cases for unauthenticated code: None
+*https://wiki.mozilla.org/WebAPI/WebMobileConnection
-Authorization model for normal content: None
+*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/WKMpHavP9-Y/discussion
-Potential mitigations:  None
+{| border="1" class="wikitable"
+! Type
+! Use Cases
+! Authorization Model
+! Notes & Other Controls
+|-
+| Web Content || None || No access
+|-
+| Installed Web Apps || None || No access
+|-
+| Privileged Web Apps || None || No access
+|-
+| Certified Web Apps ||  Telephone status UI || Implicit
+|}
-== Trusted (authenticated by publisher) ==
+=== Notes ===
-Use cases for authenticated code: None
+Some radio feature are also accessible via Settings API
-Authorization model: None
-Potential mitigations: None
-== Certified (vouched for by trusted 3rd party) ==
+__NOTOC__
-Use cases for certified code: Telephone status UI
-Authorization model: Implicit
-Potential mitigations: None
-Notes: Some radio feature are also accessible via Settings API
+[[Category:Web APIs]]
+[[Category:Security]]