Security/Reviews/Firefox4/IndexedDB Security Review: Difference between revisions

Security/Reviews/Firefox4/IndexedDB Security Review (view source)

683 bytes added , 30 September 2010

canmove, Confirmed users

637

edits

@@ Line 102: / Line 102: @@
 ** currently Quota is 50Mb
 ** if users OK exceeding quota then space is unlimited
+* NOT hooked up to "Clear Recent History..." in any way
+** why not? what does it mean for databases?
+** if we try to partially delete we could muck with things
+** if we delete everything users could get pissed
+** if database was created during the period in question we could safely nuke the whole thing
+** if database pre-existed but was modified in that time, then what?
+* if we hook it up to Clear Recent History it probably needs its own category/check-box
+* feature not yet hooked up to "forget about this site" {{bug|594478}}
+* indexedDB disabled in private browsing mode.
+** Site might be able to guess you're in private mode if you've previously allowed them to store stuff?