WebAPI/Security/PowerManagement: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
mNo edit summary
No edit summary
 
(One intermediate revision by one other user not shown)
Line 1: Line 1:
Name of API: Power Management APIs
== Power Management APIs ==
 
References:
*https://wiki.mozilla.org/WebAPI/PowerManagementAPI
*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion
Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events


General Use Cases: None
General Use Cases: None
Line 12: Line 7:
Threat severity: Moderate
Threat severity: Moderate


== Regular web content (unauthenticated) ==
References:
Use cases for unauthenticated code: None
*https://wiki.mozilla.org/WebAPI/PowerManagementAPI
 
*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion
Authorization model for normal content: None
Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events
 
Authorization model for installed content: None
 
Potential mitigations: N/A
 
== Privileged (approved by app store) ==
Use cases for privileged code: None
 
Authorization model: None
 
Potential mitigations: N/A
 
== Certified (vouched for by trusted 3rd party) ==
Use cases for certified code: Power Management App


Authorization model: Implicit
{| border="1" class="wikitable"
! Type
! Use Cases
! Authorization Model
! Notes & Other Controls
|-
| Web Content || None || No access||
|-
| Installed Web Apps || None || No access||
|-
| Privileged Web Apps || None || No access||
|-
| Certified Web Apps || Power Management App || Implicit ||
|}


Potential mitigations: N/A
[[Category:Web APIs]]
[[Category:Security]]

Latest revision as of 23:41, 1 October 2014

Power Management APIs

General Use Cases: None

Inherent threats: Denial of service to device (including telephone), annoyance

Threat severity: Moderate

References:

Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events

Type Use Cases Authorization Model Notes & Other Controls
Web Content None No access
Installed Web Apps None No access
Privileged Web Apps None No access
Certified Web Apps Power Management App Implicit
Retrieved from "https://wiki.allizom.org/index.php?title=WebAPI/Security/PowerManagement&oldid=1021344"