Confirmed users
76
edits
WebAPI/WidgetAPI: Difference between revisions
Jump to navigation
Jump to search
→Proposal
| Line 4: | Line 4: | ||
==Use case== | ==Use case== | ||
==Proposal== | ==Proposal== | ||
===extend manifest.webapp=== | ===extend manifest.webapp=== | ||
Declare details of widget in mainfest. | Declare details of widget in mainfest. | ||
| Line 25: | Line 19: | ||
} | } | ||
} | } | ||
=== embed-widgets {{bug|1005818}} === | |||
In order to expose to privileged APPs and consider security issue.<br /> | |||
* "embed-widgets" is a new permission for "mozapp" attribute, it comes from [https://developer.mozilla.org/en-US/Apps/Build/App_permissions#embed-apps 'embed-apps'] but is more restricted. Please refer to [https://wiki.mozilla.org/WebAPI/WidgetAPI#Browser_API next section]. | |||
* Set manifest entry in "widget" attribute. | |||
<iframe mozbrowser=“true" mozapp=“manifestURL" widget=“widgetEntry” remote=“true”> | |||
=== permission requirements === | === permission requirements === | ||
*embed-widgets | *embed-widgets | ||
| Line 32: | Line 29: | ||
*browser-api (combine with embed-widget would be downgrade ) | *browser-api (combine with embed-widget would be downgrade ) | ||
=== Restriction === | ==== Restriction ==== | ||
*Disallow SRC attribute. | *Disallow SRC attribute. | ||
*Disallow parts of security sensitive browser API | *Disallow parts of security sensitive browser API | ||
*Ignore mozLockOrientation/mozUnlockOrientation | *Ignore mozLockOrientation/mozUnlockOrientation | ||
=== examples === | ==== examples ==== | ||
*APP: | *APP: | ||
<iframe mozbrowser=“true" mozapp=“manifestURL” remote=“true” src=“appURL”> | <iframe mozbrowser=“true" mozapp=“manifestURL” remote=“true” src=“appURL”> | ||