TPE CONNECTIVITY GROUP/2015-05-05

Discussion Topics

Dimi

• Done & Working in Progress

1. bug 1160671 - [Flame] Unable to turn on NFC. root cause found
2. bug 964697 - (emulator-NFC) B2G Emulator: NFC support in KK. working
3. Study service worker

• Review & Feedbacks

• Pending

1. bug 1136512 - [Lightsaber] Support NFC . checking if sony can support libnfc-nci github
2. bug 964697 - (emulator-NFC) B2G Emulator: NFC support in KK. on-going

Ethan

• Done & Working in Progress
  1. Study JavaScript security
     • Review Same-Origin Policy (SOP) to clarify how SOP uses origin
     • Relaxing SOP
       1. Document.domain
       2. Cross-Origin Resource Sharing (CORS)
       3. Cross-document messaging: postMessage API
  2. Study Cross-Site Scripting (XSS) attack
     • Reflected XSS
     • Persistent (Stored) XSS
  3. Study Content Security Policy (CSP)
     • CSP directive
     • Script execution: script-src
       • Plug-in content: object-src
       • Stylesheets and fonts: style-src and font-src
       • Passive multimedia: img-src and media-src
       • Subframes: frame-src
       • Default policy: default-src
     • CSP key words
       • none
       • self
       • data:
       • unsafe-inline
       • unsafe-eval
  4. Start to trace Firefox CSP implementation
     • nsDocument::initCSP()
     • nsCSPParser - which separates the CSP header into tokens and parses the CSP
     • nsCSPUtils which holds the internal representation of the CSP
     • nsCSPContext which is the interface through which CSP gets called
  5. Start to play with CSP mochitest
     • dom/base/test/csp/test_csp_path_matching.html

• Review & Feedbacks
  1. Help Jonathan on bug 1158661 - [FFOS2.0][Woodduck][HOMO]RSTP video in 720 H-264 Plays abnormal which can hear the audio only without the video shows

• Pending

Henry

• Done & Working in Progress
• Review & Feedbacks
• Pending
• Others

Jonathan

• Done & Working in Progress
• Review & Feedbacks
• Pending
• Others

Yoshi

• Done & Working in Progress
• Review & Feedbacks
• Pending
• Others