Security/B2G/Browser API

From MozillaWiki
< Security‎ | B2G
Revision as of 03:34, 3 May 2012 by Ptheriault (talk | contribs)
Jump to navigation Jump to search
Please use "Edit with form" above to edit this page.

Project Info

Browser API
Project Page `
Next Milestone `
Security Resource `

{{#set:Component=Browser API |Project=` |Milestone=` |Resource=` }}

Security Information

Status: OK
Securtiy Approved for Beta Launch?: No
Data Flow Diagram: `
Threat Model: `
Bugs: `
Security Review: `
Final Security Approval: no

{{#set:Sectrackerstatus=OK |Simpyn=No |DFD=` |TM=` |bugs=` |Secreview=` |SecTrackerFSA=no }} [Category:WebApi]]

Background

Goals

  • Provide support so that a Browser can be implemented as a Web App
  • Implemented as new type of iframe which provides limited cross-origin access so that a page embedding this iframe can act like a web browser.
  • Being implemented with a minimal set of APIs to

Specification:

Bugs:

Pages: Source:

Data Flow Diagram

Answered Questions

Open Questions

Will there be a separate cookie store for <iframe mozbrowser>, or will they be shared?

Threat Model

Authorization Model

  • Implicit: An app will need to granted the browser permission

Implementation Requirements

  • Many, TBD.