WebAPI/Security/PowerManagement: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
No edit summary
mNo edit summary
Line 1: Line 1:
Name of API: Power Management APIs
Name of API: Power Management APIs
References:
References:
*https://wiki.mozilla.org/WebAPI/PowerManagementAPI
*https://wiki.mozilla.org/WebAPI/PowerManagementAPI
*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion
*Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion
Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events
Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events



Revision as of 21:42, 6 August 2012

Name of API: Power Management APIs

References:

Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events

General Use Cases: None

Inherent threats: Denial of service to device (including telephone), annoyance

Threat severity: Moderate

Regular web content (unauthenticated)

Use cases for unauthenticated code: None

Authorization model for normal content: None

Authorization model for installed content: None

Potential mitigations: N/A

Privileged (approved by app store)

Use cases for privileged code: None

Authorization model: None

Potential mitigations: N/A

Certified (vouched for by trusted 3rd party)

Use cases for certified code: Power Management App

Authorization model: Implicit

Potential mitigations: N/A