Security/Reviews/Gaia/costcontrol

App Review Details

• App: Usage (gaia/apps/costcontrol)
• Review Date: Sept 2013
• Review Lead: Rob Fletcher (:omerta)

Architecture

Relevant Source Code

Shared Code

• shared/js/async_storage.js
• shared/js/l10n.js
• shared/js/l10n_date.js
• shared/js/lazy_loader.js
• shared/js/notification_helper.js
• shared/js/settings_listener.js

Permissions

• "sms":{} - sms-received, sms-sent system message.
• "mobileconnection":{} - access to SIM card, check service status
• "desktop-notification":{} - Notify user, with desktop notification, they've exceeded usage
• "settings":{ "access": "readonly" } - to read settings... but I don't see any references to mozSettings() except in a test
• "networkstats-manage":{} - Obtain statistics of data usage
• "alarms": {}, - alarm system message
• "telephony": {}, - telephony-call-ended system message.
• "storage": {} - use storage without size limitations