177
edits
B2G App Security Model: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 52: | Line 52: | ||
*Ability to grant trust for certain highly sensitive privileges (such as phone dialing) may be restricted at the OS level to specific trusted parties | *Ability to grant trust for certain highly sensitive privileges (such as phone dialing) may be restricted at the OS level to specific trusted parties | ||
|Feature non-goals=This document does not try to define the broader B2G security model, nor does it define the Open Web Apps security model even though we expect that B2G will contain a superset of the latter's requirements. | |Feature non-goals=This document does not try to define the broader B2G security model, nor does it define the Open Web Apps security model even though we expect that B2G will contain a superset of the latter's requirements. | ||
|Feature functional spec=A threat model is being documented here: | |Feature functional spec=A threat model is being documented here: [[B2G_App_Security_Model/Threat_Model]] | ||
A full analysis of the requirements and associated proposals is being documented here: [[Apps/Security]] | |||
WebAPI permissions manager implementation: https://bugzilla.mozilla.org/show_bug.cgi?id=707625 | WebAPI permissions manager implementation: https://bugzilla.mozilla.org/show_bug.cgi?id=707625 | ||