Websites/Mozilla.org/One Mozilla/Documentation/Self-Secreview: Difference between revisions

no edit summary
(Created page with "When creating a sub-site, here are two things that could potentially be security issues: '''1. SSL''' Since the site collects email addresses the site must be exclusively serve...")
 
No edit summary
Line 10: Line 10:


Here's how to test this:
Here's how to test this:
1. Within Firefox, Go to Tools->Web Developer->Web Console
1. Within Firefox, Go to Tools->Web Developer->Web Console<br>
2. In the new window click on the buttons to disable display of CSS, JS,
2. In the new window click on the buttons to disable display of CSS, JS,
and Web Developer (Only Net should be visible)
and Web Developer (Only Net should be visible)<br>
3. Clear any data in the current window (the clear button is on the
3. Clear any data in the current window (the clear button is on the
upper right)
upper right)<br>
4. Load the Mozilla page
4. Load the Mozilla page<br>
5. Review the requests in the window for anything that has facebook.com
5. Review the requests in the window for anything that has facebook.com
or twitter.com
or twitter.com<br>
6. If you see any requests to these sites that occur without the user
6. If you see any requests to these sites that occur without the user
taking any action on the site, then we have an issue
taking any action on the site, then we have an issue<br>
 


We've accomplished a privacy friendly sharing feature in our other sites. An example can be found [https://developer.mozilla.org/en-US/demos/detail/front-invaders here]. Just click on the "Share It" button to see options for twitter and facebook. This design only sends requests to facebook/twitter after the user has clicked on the respective icons. Simply viewing our Mozilla
We've accomplished a privacy friendly sharing feature in our other sites. An example can be found [https://developer.mozilla.org/en-US/demos/detail/front-invaders here]. Just click on the "Share It" button to see options for twitter and facebook. This design only sends requests to facebook/twitter after the user has clicked on the respective icons. Simply viewing our Mozilla
page does not result in the user transmitting information to facebook or
page does not result in the user transmitting information to facebook or
twitter.
twitter.
718

edits