Confirmed users
1,340
edits
WebAPI/Security/TCPSocket: Difference between revisions
no edit summary
Ptheriault (talk | contribs) No edit summary |
No edit summary |
||
| (One intermediate revision by one other user not shown) | |||
| Line 1: | Line 1: | ||
== Socket API == | |||
Brief purpose of API: Grant full access to raw sockets to allow applications such as SMTP clients etc | Brief purpose of API: Grant full access to raw sockets to allow applications such as SMTP clients etc | ||
| Line 12: | Line 8: | ||
Threat severity: High | Threat severity: High | ||
Reference | |||
*https://bugzilla.mozilla.org/show_bug.cgi?id=733573 | |||
*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/Asm37KDoVB4/discussion | |||
=== Permissions Table=== | === Permissions Table=== | ||
| Line 32: | Line 32: | ||
| Certified Web Apps || Open a connection to any domain/port || Implicit || specify hosts/ports in the manifest, permissions granted implicitly and not able to be revoked (unless device is in developer mode) | | Certified Web Apps || Open a connection to any domain/port || Implicit || specify hosts/ports in the manifest, permissions granted implicitly and not able to be revoked (unless device is in developer mode) | ||
|} | |} | ||
[[Category:Web APIs]] | |||
[[Category:Security]] | |||