Security/Reviews/Gaia/costcontrol: Difference between revisions

Security/Reviews/Gaia/costcontrol (view source)

336 bytes removed , 9 October 2013

Confirmed users

353

edits

@@ Line 118: / Line 118: @@
 === Security Risks & Mitigating Controls ===
-* After speaking with developer regarding [https://wiki.mozilla.org/Security/Reviews/Gaia/costcontrol&amp;section=20#Suspicious_but_OK suspected but ok] issues, specifically the dynamically creating <script> tags in view_manager.js, I've learned that in some instances developers depend on innerHTML quirks for "sanitization" purposes.
 === Actions & Recommendations ===