WebAPI/WidgetAPI: Difference between revisions
< WebAPI
Jump to navigation
Jump to search
| Line 28: | Line 28: | ||
==Issues under discussion== | ==Issues under discussion== | ||
* | * Disallow [https://developer.mozilla.org/zh-TW/docs/WebAPI/Browser#.E5.AD.98.E5.8F.96_%28Navigation%29_.E5.87.BD.E5.BC.8F Browser API] | ||
** [https://developer.mozilla.org/en-US/docs/Web/API/HTMLIFrameElement.getScreenshot Screenshots] | ** [https://developer.mozilla.org/en-US/docs/Web/API/HTMLIFrameElement.getScreenshot Screenshots] | ||
** [https://developer.mozilla.org/zh-TW/docs/WebAPI/Browser#.E5.AD.98.E5.8F.96_%28Navigation%29_.E5.87.BD.E5.BC.8F navigation notifications] | ** [https://developer.mozilla.org/zh-TW/docs/WebAPI/Browser#.E5.AD.98.E5.8F.96_%28Navigation%29_.E5.87.BD.E5.BC.8F navigation notifications] | ||
** [https://developer.mozilla.org/en-US/docs/Web/Reference/Events/mozbrowserusernameandpasswordrequired mozbrowserusernameandpasswordrequired] | ** [https://developer.mozilla.org/en-US/docs/Web/Reference/Events/mozbrowserusernameandpasswordrequired mozbrowserusernameandpasswordrequired] | ||
** [https://developer.mozilla.org/en-US/docs/Web/Reference/Events/mozbrowseropenwindow mozbrowseropenwindow] (window.open) | |||
** [https://developer.mozilla.org/en-US/docs/Web/Reference/Events/mozbrowseropenwindow mozbrowsershowmodalprompt] (window.alert) | |||
** [https://developer.mozilla.org/en-US/docs/Web/Reference/Events/mozbrowsercontextmenu mozbrowsercontextmenu] | |||
==Bugs== | ==Bugs== | ||
Revision as of 03:43, 13 May 2014
Widget API
The widget API allows privileged APPs have ability to embed APPs in their own iframe.
Use case
Proposal
embed-widgets
In order to expose to privileged APPs and consider security issue.
"embed-widgets" is a new permission for "mozapp" attribute, it comes from 'embed-apps' but is more restricted. bug 1005818
<iframe mozapp="manifesturl" mozwidget="mywidget1">
extend manifest.webapp
Declare details of widget in mainfest.
{
name: "MyApp2000",
...
widgets: {
"mywidget1": {
href: "widget.html"
positions: ["homescreen", "lockscreen"]
description: "This is my cool widget"
},
"myotherwidget": { ... }
}
}
Restriction
Issues under discussion
- Disallow Browser API