canmove, Confirmed users
1,220
edits
WebAPI/Security/TCPSocket: Difference between revisions
Jump to navigation
Jump to search
no edit summary
Ptheriault (talk | contribs) No edit summary |
|||
| Line 13: | Line 13: | ||
Threat severity: High | Threat severity: High | ||
== | === Permissions Table=== | ||
Authorization | {| border="1" class="wikitable" | ||
! Type | |||
! Use Cases | |||
! Authorization Model | |||
! Notes & Other Controls | |||
|- | |||
| Web Content || None|| No access | |||
|- | |||
| Installed Web Apps || None || No access | |||
|- | |||
| Privileged Web Apps || Talk to non-HTTP services. SSH, FTP, mail clients, supporting custom protocols || Implicit|| | |||
*Firewall should prohibit access to privileged low number OS ports (<1024). | *Firewall should prohibit access to privileged low number OS ports (<1024). | ||
*Listening on a port < 1024 should be prohibited. | *Listening on a port < 1024 should be prohibited. | ||
*Specify hosts/ports in the manifest, permissions granted implicitly. | *Specify hosts/ports in the manifest, permissions granted implicitly. | ||
|- | |||
| Certified Web Apps || Open a connection to any domain/port || Implicit || specify hosts/ports in the manifest, permissions granted implicitly and not able to be revoked (unless device is in developer mode) | |||
|} | |||