394352 - protect navigator.offlineResources with a permission

Status: RESOLVED DUPLICATE of bug 402272

(Core :: DOM: Core & HTML, defect, P2)

Description

[Dave Camp (:dcamp)]

Attachment: protect offline apps with a permission

Since navigator.offlineResources lets sites pin data on the user's disk, it should probably be protected by a permission.

The attached patch throws a security exception when the API is accessed without the necessary permissions.

Comment 1

[Dave Camp (:dcamp)]

Attachment: test fix

this fix is needed to fix the tests after adding the permission.

Comment 2

[Dave Camp (:dcamp)]

Comment on attachment 278997 [details] [diff] [review]
protect offline apps with a permission

Clearing the approval flag.  This is going to get caught up in the upcoming API changes, and this doesn't make sense to commit without UI to manage the permission anyway.

Comment 3

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Dcamp, what's going on here? Shouldn't we land this to let the UI folks build on it? What priority do you think this should have?

Comment 4

[Dave Camp (:dcamp)]

This patch has ended up as part of the patch for bug 402272, so we can probably close this bug...

Comment 5

[Jonas Sicking (:sicking) No longer reading bugmail consistently]

Sold!