User:Mkaply:Fx-Docs:Microformats: Difference between revisions

Line 85: Line 85:
* What security issues do you address in your project?
* What security issues do you address in your project?
* Is system or subsystem security compromised in any way if your project's configuration files / prefs are corrupt or missing?
* Is system or subsystem security compromised in any way if your project's configuration files / prefs are corrupt or missing?
**There are no configuration files or prefs. If the Microformats.js file is missing from modules, microformats simply don't work.
* Include a thorough description of the security assumptions, capabilities and any potential risks (possible attack points) being introduced by your project.
* Include a thorough description of the security assumptions, capabilities and any potential risks (possible attack points) being introduced by your project.
** Assumptions
*** Components.import functionality for importing JavaScript modules is a secure way to import modules
** Capabilities
** Risks
* Notes
** The microformats code does not deal with "active" content. It queries the contents of DOM nodes using textContent. It does not process any JS that is contained in those DOM nodes.


== Privacy ==
== Privacy ==
219

edits