WebAPI/Security/TCPSocket: Difference between revisions

No edit summary
Line 33: Line 33:


== Certified (system-critical apps) ==
== Certified (system-critical apps) ==
*Use cases: Open a connection to any domain/port
Use cases: Open a connection to any domain/port
*Authorization model: Implicit
 
*Potential mitigations: specify hosts/ports in the manifest, permissions granted implicitly and not able to be revoked (unless device is in developer mode)
Authorization model: Implicit
 
Potential mitigations: specify hosts/ports in the manifest, permissions granted implicitly and not able to be revoked (unless device is in developer mode)
Confirmed users
717

edits