TPE CONNECTIVITY GROUP/2015-05-05

Discussion Topics

Dimi

• Done & Working in Progress

1. bug 1160671 - [Flame] Unable to turn on NFC. root cause found
2. bug 964697 - (emulator-NFC) B2G Emulator: NFC support in KK. working
3. Study service worker

• Review & Feedbacks

• Pending

1. bug 1136512 - [Lightsaber] Support NFC . checking if sony can support libnfc-nci github
2. bug 964697 - (emulator-NFC) B2G Emulator: NFC support in KK. on-going

Ethan

• Done & Working in Progress
  1. Study JavaScript security
     • Review Same-Origin Policy (SOP) to clarify how SOP uses origin
     • Relaxing SOP
       1. Document.domain
       2. Cross-Origin Resource Sharing (CORS)
       3. Cross-document messaging: postMessage API
  2. Study Cross-Site Scripting (XSS) attack
     • Reflected XSS
     • Persistent (Stored) XSS
  3. Study Content Security Policy (CSP)
     • CSP directive
     • Script execution: script-src
       • Plug-in content: object-src
       • Stylesheets and fonts: style-src and font-src
       • Passive multimedia: img-src and media-src
       • Subframes: frame-src
       • Default policy: default-src
     • CSP key words
       • none
       • self
       • data:
       • unsafe-inline
       • unsafe-eval
  4. Start to trace CSP implementation in Firefox
     • nsDocument::initCSP()
     • nsCSPParser - which separates the CSP header into tokens and parses the CSP
     • nsCSPUtils which holds the internal representation of the CSP
     • nsCSPContext which is the interface through which CSP gets called
  5. Start to play with CSP mochitest in Gecko
     • dom/base/test/csp/test_csp_path_matching.html
  6. Attend meeting on 5/5: New security model update hosted by Jean Gong
  7. Coordinate Necko study group sessions

• Review & Feedbacks
  1. Help Jonathan on bug 1158661 - [FFOS2.0][Woodduck][HOMO]RSTP video in 720 H-264 Plays abnormal which can hear the audio only without the video shows

• Pending

Henry

• Done & Working in Progress
• Review & Feedbacks
• Pending
• Others

Jonathan

• Done & Working in Progress
  • bug 1158661 - [FFOS2.0][Woodduck][HOMO]RSTP video in 720 H-264 Plays abnormal which can hear the audio only without the video shows.
    • It can play well on my flame, but CN's QA still has problems. I made a few patches, and finally we convinced our partner that the server is malfunctioning.
  • Studying and planning about gecko performance marker interface.
• Review & Feedbacks
• Pending
  • bug 1142383 - [RTSP] More RTSP testcases (emulator black screen, try to use emulator-kk or x86 now)
  • Refactor planning
• Others

Yoshi

• Done & Working in Progress
  • Discussed with Jonas with his cookie proposal, still need to confirm with him. http://bit.ly/1zf8VlV
• Review & Feedbacks
  • bug 1119152 - [SecureElement] Implement SEReader.isSEPresent
  • bug 884594 - Support NFC Access Control for Secure Element Access
• Pending
• Others