Security/Reviews/Gaia/Video: Difference between revisions

Jump to navigation Jump to search

Security/Reviews/Gaia/Video (view source)

Revision as of 03:12, 21 February 2013

35 bytes added ,  21 February 2013
no edit summary
No edit summary
No edit summary
Line 146: Line 146:
* {{bug|841196}}  Applications should stop using settings permission to just get locale info
* {{bug|841196}}  Applications should stop using settings permission to just get locale info


The application might not need the device-storage:pictures permission. I've filed a bug to investigate this.
The following issues were found with the calling of the YouTube API:


* {{bug|843144}}  Videos might not need the device-storage:pictures permission
* {{bug|843326}}  Video application should use SSL version of YouTube API
* {{bug|843330}}  Video app is vulnerable to API URL parameter injection attack
St3fan
Confirmed users
971

edits

Retrieved from "https://wiki.allizom.org/Special:MobileDiff/524985"

Navigation menu