Platform/2014-Q3-Goals: Difference between revisions
< Platform
Jump to navigation
Jump to search
DavidBolter (talk | contribs) |
|||
Line 97: | Line 97: | ||
(More details here: [[SecurityEngineering/2014/Q3Goals]]) | (More details here: [[SecurityEngineering/2014/Q3Goals]]) | ||
'''Content Security''' | |||
* {{new|Gecko Security Hooks: Finish code and debugging for New Channel API, start getting reviews}} (dri=tanvi) | * {{new|Gecko Security Hooks: Finish code and debugging for New Channel API, start getting reviews}} (dri=tanvi) | ||
* {{new|Gecko Security Hooks: Create plan for addon compatibility}} (dri=tanvi) | * {{new|Gecko Security Hooks: Create plan for addon compatibility}} (dri=tanvi) | ||
* {{new|CSP: Remove old JS implementation from mozilla-central}} (dri=sstamm) | * {{new|CSP: Remove old JS implementation from mozilla-central}} (dri=sstamm) | ||
* {{new|Evangelism: Security Open Mic presentation + blog post about new CSP implementation, maybe again as brown bag.}} (dri=sstamm) | * {{new|Evangelism: Security Open Mic presentation + blog post about new CSP implementation, maybe again as brown bag.}} (dri=sstamm) | ||
* {{new|''[stretch goal]'' CSP: Fix majority of CSP 1.1 compatibility bugs}} (dri=ckerschb) | * {{new|''[stretch goal]'' CSP: Fix majority of CSP 1.1 compatibility bugs}} (dri=ckerschb) | ||
'''Tracking Protection''' | |||
* {{new|Referer: Finish implementation of <meta> referrer control with volunteer help}} (dri=sstamm) | |||
* {{new|Land first implementation of protection in Fx 33/34 off by default.}} (dri=mmc) | * {{new|Land first implementation of protection in Fx 33/34 off by default.}} (dri=mmc) | ||
'''Communications Security''' | |||
* {{prev|SSL Error Reporting | * {{prev|SSL Error Reporting finish first implementation of ssl error reporting feature.}} (dri=grobinson) | ||
* {{new| | * {{new| HPKP - implement pinning http header}} (dri=cviecco) | ||
* {{new| | * {{new| Update roadmap for Cert Revocation improvements}} (dri=rbarnes) | ||
* {{new| | * {{new| Create a mechanism to provision phones with an alternate cert}} (dri=mgoodwin) | ||
* {{new|''[stretch goal]'' Get CA Program data into one database}} (dri=kathleen) | * {{new| Add measurement/enforcement of compliance with CABF Baseline Requirements}} (dri=keeler) | ||
* {{new| Create a tool for testing CA certificate compliance and EV-readiness}} (dri=keeler) | |||
* {{new| Add support for key wrap/unwrap and ECC in WebCrypto}} (dri=rbarnes) | |||
* {{new| ''[stretch goal]'' Get CA Program data into one database}} (dri=kathleen) | |||
=== Firefox and Platform Security === | === Firefox and Platform Security === |
Revision as of 16:59, 7 July 2014
Platform
2014 General Goals
GFX
Layout
Media
DOM
- [ON TRACK] Mirror prototype of DOM objects through xray wrappers (peterv)
- [ON TRACK] Remove nsDOMClassInfo.cpp
- [ON TRACK] Make less-privileged non-Xrayable unwaived opaque from privileged code (bug 856067)
- [ON TRACK] Route all JSContext pushing through AutoJSAPI and Implement GetEntryGlobal (bug 951991)
WebAPI
JS
- [ON TRACK] 837314 - ES6 classes
- [ON TRACK] 941796 - Generational GC on Firefox OS
- [ON TRACK] 650161 - Compacting GC to reduce memory usage
- [ON TRACK] 856533 - Escape analysis JIT optimizations
- [ON TRACK] 998392 - Use Latin1 strings to reduce memory usage
- [ON TRACK] 903519 - Allocate strings in GC nursery (for performance)
- [ON TRACK] 972710 - ARM64 JIT [stretch goal]
Accessibility
- [ON TRACK] e10s: proxy the common a11y API stuff like name, role, and states.
- [ON TRACK] GAIA: Fix all Gaia P1 a11y bugs (~30 at this time).
- [ON TRACK] FFOS: bug 1030465 - Volume change should update the screen reader volume.
- [ON TRACK] FFOS: bug 1030466 - Headphones screen reader volume is too low.
- [ON TRACK] FFOS: bug 1030468 - VC rectangle needs to work with scaled content.
- [ON TRACK] FFOS: bug 1030470 - Localization needs to work when switching locales in FxOS.
Perf
Networking
Mobile
A*Team
For full list, see A-Team Goals 2014Q3
B2G
- [ON TRACK] Run a set of performance and correctness tests per-commit to b2g-inbound on Flame devices
- [ON TRACK] Get gaia-integration tests running on device
- [ON TRACK] Expand the FxOS Certification Suite with 1.4 support, test automation to prevent regressions, and investigation of support for non-phone devices
- [ON TRACK] Green up B2G tests on TaskCluster (joint with RelEng)
Developer Productivity
- [ON TRACK] Deploy ReviewBoard for developers to start using (joint with RelEng)
Performance
- [ON TRACK] Deploy new Talos tests for tp5o_scroll, webgl, webrtc, and mainthread I/O
- [ON TRACK] Get Datazilla alerts to beta mode (full parity with graph server alerts) with reduced noise
- [ON TRACK] Get Eideticker running against Android again with increased frequency
- [ON TRACK] Run B2G Eideticker against same branch/build combinations as our other on-device perf tests
- [ON TRACK] Stand up a Games Benchmarking system for webaudio tests running against Firefox and Chrome
Treeherder
- [ON TRACK] Deliver performance web service for ingesting and returning performance data
- [ON TRACK] Deliver a UI for viewing Talos data
Sheriffing
- [ON TRACK] Fully transition sheriffing from TBPL to Treeherder
General Automation
- [ON TRACK] Create weekly reports that describe how many tests have been added/disabled/enabled per suite and platform
- [ON TRACK] Move reftest to mozbase
- [ON TRACK] Add command executors for Marionette for Java and Python
Bugzilla
- [ON TRACK] Improve load time of related bugs; can decrease show_bug load times by up to 12%
- [ON TRACK] Minify and concatenate JS files
- [ON TRACK] Authoritative view for review history
- [ON TRACK] Rewrite docs for REST API
Community
- [ON TRACK] Create good_next_bugs (name can be adjusted) so once contributors are comfortable they can do more serious coding/problem solving on a project they are familiar with
- [ON TRACK] Monthly review of mentored bugs and projects
Web Engineering
SUMO and Input
Release Engineering
Release Engineering Operations
Developer Services
Security & Privacy Engineering
6/30/2014 draft, not yet frozen (More details here: SecurityEngineering/2014/Q3Goals)
Content Security
- [NEW] Gecko Security Hooks: Finish code and debugging for New Channel API, start getting reviews (dri=tanvi)
- [NEW] Gecko Security Hooks: Create plan for addon compatibility (dri=tanvi)
- [NEW] CSP: Remove old JS implementation from mozilla-central (dri=sstamm)
- [NEW] Evangelism: Security Open Mic presentation + blog post about new CSP implementation, maybe again as brown bag. (dri=sstamm)
- [NEW] [stretch goal] CSP: Fix majority of CSP 1.1 compatibility bugs (dri=ckerschb)
Tracking Protection
- [NEW] Referer: Finish implementation of <meta> referrer control with volunteer help (dri=sstamm)
- [NEW] Land first implementation of protection in Fx 33/34 off by default. (dri=mmc)
Communications Security
- [CARRY OVER] SSL Error Reporting finish first implementation of ssl error reporting feature. (dri=grobinson)
- [NEW] HPKP - implement pinning http header (dri=cviecco)
- [NEW] Update roadmap for Cert Revocation improvements (dri=rbarnes)
- [NEW] Create a mechanism to provision phones with an alternate cert (dri=mgoodwin)
- [NEW] Add measurement/enforcement of compliance with CABF Baseline Requirements (dri=keeler)
- [NEW] Create a tool for testing CA certificate compliance and EV-readiness (dri=keeler)
- [NEW] Add support for key wrap/unwrap and ECC in WebCrypto (dri=rbarnes)
- [NEW] [stretch goal] Get CA Program data into one database (dri=kathleen)
Firefox and Platform Security
- Marifuzz fuzzer ported to and running on Flame devices.
- Update ASan and LSan work for DOMFuzzer
- Update "Bounty Stars" document with issues found by external reporters and updating DOMFuzzer to reflect these results.
- Get Clang on RelEng ready for official OS X ASan builds.
- Initial work to move CoreFuzz towards running in cloud environments.
- WebCrypto API fuzzing using Dharma fuzzer.
- Port a portion of WebRTC fuzzing from Frambois fuzzer to Dharma fuzzer.
- Peach: Improving and porting Peach 2 to Python 3.
- Public Mozilla Security Github work: Moving of fuzzing tools from Fuzzing Hg to GitHub, including work to separate harnesses from testcase generation tools.