WebAPI/Security/PowerManagement: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Created page with "Name of API: Power Management APIs Reference: https://wiki.mozilla.org/WebAPI/PowerManagementAPI Brief purpose of API: Allow apps to turn off or restart device and catch on-wake...")
 
Line 17: Line 17:
== Trusted (authenticated by publisher) ==
== Trusted (authenticated by publisher) ==
*Use cases for authenticated code: None
*Use cases for authenticated code: None
Authorization model: None
*Authorization model: None
*Potential mitigations:N/A
*Potential mitigations:N/A



Revision as of 21:53, 30 July 2012

Name of API: Power Management APIs Reference: https://wiki.mozilla.org/WebAPI/PowerManagementAPI

Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events General Use Cases: None

Inherent threats: Denial of service to device (including telephone), annoyance

Threat severity: Moderate

Regular web content (unauthenticated)

  • Use cases for unauthenticated code:None
  • Authorization model for normal content:None
  • Authorization model for installed content:None
  • Potential mitigations: N/A

Trusted (authenticated by publisher)

  • Use cases for authenticated code: None
  • Authorization model: None
  • Potential mitigations:N/A

Certified (vouched for by trusted 3rd party)

Use cases for certified code: Replacement Power Management App Authorization model: Implicit Potential mitigations: