WebAPI/Security/PowerManagement: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
mNo edit summary |
||
| Line 1: | Line 1: | ||
Name of API: Power Management APIs | Name of API: Power Management APIs | ||
References: | References: | ||
*https://wiki.mozilla.org/WebAPI/PowerManagementAPI | *https://wiki.mozilla.org/WebAPI/PowerManagementAPI | ||
*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion | *Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion | ||
Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events | Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events | ||
Revision as of 21:42, 6 August 2012
Name of API: Power Management APIs
References:
- https://wiki.mozilla.org/WebAPI/PowerManagementAPI
- Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion
Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events
General Use Cases: None
Inherent threats: Denial of service to device (including telephone), annoyance
Threat severity: Moderate
Regular web content (unauthenticated)
Use cases for unauthenticated code: None
Authorization model for normal content: None
Authorization model for installed content: None
Potential mitigations: N/A
Privileged (approved by app store)
Use cases for privileged code: None
Authorization model: None
Potential mitigations: N/A
Certified (vouched for by trusted 3rd party)
Use cases for certified code: Power Management App
Authorization model: Implicit
Potential mitigations: N/A