Confirmed users
14
edits
Apps/SecurityDetails: Difference between revisions
m
Added link for CSP
(Minor changes to sentence structure; added picture to explain the sandbox model) |
m (Added link for CSP) |
||
| Line 222: | Line 222: | ||
* The app will have to be reviewed by the store. Including reviewing all of the code that makes up the app. | * The app will have to be reviewed by the store. Including reviewing all of the code that makes up the app. | ||
* The app will be signed by the store to ensure that hacking the store website doesn't allow a hacker to install arbitrary content on users devices. | * The app will be signed by the store to ensure that hacking the store website doesn't allow a hacker to install arbitrary content on users devices. | ||
* The app will use a CSP policy to harden the app itself against bugs which would allow an attacker to inject code into the app. This will also make reviewing the app easier. | * The app will use a [https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html CSP] policy to harden the app itself against bugs which would allow an attacker to inject code into the app. This will also make reviewing the app easier. | ||
=== App Review === | === App Review === | ||