WebAPI/Security/Alarm: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
No edit summary
No edit summary
Line 1: Line 1:
Name of API: Alarm API
== Alarm API==
Brief purpose of API: Let apps set timers to wake up at a specified time
General Use Cases:
*Implement an alarm reminder app by setting an alarm intent for a future time
*Set an alarm to ping a server at a specific time or set interval


Reference:<br>
Reference:<br>
https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion<br>
https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion<br>
http://groups.google.com/group/mozilla.dev.webapps/browse_thread/thread/29f1efb730a9c17/5fd64f1fefe0ddd8
http://groups.google.com/group/mozilla.dev.webapps/browse_thread/thread/29f1efb730a9c17/5fd64f1fefe0ddd8
Brief purpose of API: Let apps set timers to wake up at a specified time
General Use Cases:
*Implement an alarm reminder app by setting an alarm intent for a future time
*Set an alarm to ping a server at a specific time or set interval


Inherent threats: Annoyance
Inherent threats: Annoyance


Threat severity: Low
Threat severity: Low
=== Permissions Table===


== Regular web content (unauthenticated) ==
{| border="1" class="wikitable"
Use cases for unauthenticated code: Relaunch the app via an alarm intent at a future time
! Type
 
! Use Cases
Authorization model for normal content: None
! Authorization Model
 
! Notes & Other Controls
Authorization model for installed content: Implicit
|-
 
| Web Content || None || No access
Potential mitigations: Should be a way to disable alarm for a given app
|-
 
| Installed Web Apps || General use cases || Implicit || Should be a way to disable alarm for a given app
== Privileged (approved by app store) ==
|- 
Same as for installed untrusted app
| Privileged Web Apps || General use cases || Implicit || Should be a way to disable alarm for a given app
 
|-
== Certified (system-critical apps) ==
| Certified Web Apps || General use cases || Implicit|| Should be a way to disable alarm for a given app
Same as for installed untrusted app
|}

Revision as of 07:02, 24 September 2012

Alarm API

Brief purpose of API: Let apps set timers to wake up at a specified time General Use Cases:

  • Implement an alarm reminder app by setting an alarm intent for a future time
  • Set an alarm to ping a server at a specific time or set interval

Reference:
https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion
http://groups.google.com/group/mozilla.dev.webapps/browse_thread/thread/29f1efb730a9c17/5fd64f1fefe0ddd8

Inherent threats: Annoyance

Threat severity: Low

Permissions Table

Type Use Cases Authorization Model Notes & Other Controls
Web Content None No access
Installed Web Apps General use cases Implicit Should be a way to disable alarm for a given app
Privileged Web Apps General use cases Implicit Should be a way to disable alarm for a given app
Certified Web Apps General use cases Implicit Should be a way to disable alarm for a given app
Retrieved from "https://wiki.mozilla.org/index.php?title=WebAPI/Security/Alarm&oldid=472952"