Closed Bug 1028326 Opened 10 years ago Closed 10 years ago

fxpay: restrict receipts to app origin via product URL

Categories

(Marketplace Graveyard :: Payments/Refunds, defect, P2)

Product:
Marketplace Graveyard
Component:
Payments/Refunds
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED FIXED
Milestone:
2014-07-15

People

(Reporter: kumar, Assigned: kumar)

References

Details

(Whiteboard: [qa-]) 

Instead of app ID (see bug 1024057) let's restrict receipts to app origin.

This will ensure that otherwise valid receipts from *other* apps cannot be used as in-app receipts.

This patch should remove the appId requirement in fxpay. Instead, fxpay can detect origin via manifest or window.location.
Blocks: 956358
Whiteboard: [qa-]
Priority: -- → P2
Assignee: nobody → kumar.mcmillan
https://github.com/mozilla/fxpay/pull/20
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → 2014-07-15
You need to log in before you can comment on or make changes to this bug.