Security/Reviews/B2G/Contacts

< Security‎ | Reviews‎ | B2G
Revision as of 05:51, 15 August 2013 by Ptheriault (talk | contribs) (Created page with "=== Gecko API Review Details === * API: Contacts API * Review Date: August 15 2013 * Review Lead: Paul Theriault === Overview === API is documented on [https://developer.mozi...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Gecko API Review Details

  • API: Contacts API
  • Review Date: August 15 2013
  • Review Lead: Paul Theriault

Overview

API is documented on mdn

Architecture

Components

Relevant Source Code

Permission Model

Parent/Child Communication

Code Review Notes

1. Content/Chrome Segregation

2. Process Segregation

3. Data validation & Sanitization

4. Denial of Service

5. Use of Privileged APIs

6. Interfaces with other Apps/Content

Security Risks & Mitigating Controls

Actions & Recommendations