WebAPI/Security/PowerManagement

Name of API: Power Management APIs References:

• https://wiki.mozilla.org/WebAPI/PowerManagementAPI
• Security discussion: https://groups.google.com/d/topic/mozilla.dev.webapps/uXjjn_62Jek/discussion

Brief purpose of API: Allow apps to turn off or restart device and catch on-wake events

General Use Cases: None

Inherent threats: Denial of service to device (including telephone), annoyance

Threat severity: Moderate

Regular web content (unauthenticated)

Use cases for unauthenticated code: None

Authorization model for normal content: None

Authorization model for installed content: None

Potential mitigations: N/A

Privileged (approved by app store)

Use cases for privileged code: None

Authorization model: None

Potential mitigations: N/A

Certified (vouched for by trusted 3rd party)

Use cases for certified code: Power Management App

Authorization model: Implicit

Potential mitigations: N/A