1686677 - Update the text on "Adding Glean to your project" page to include Glean.js

Status: RESOLVED FIXED

(Data Platform and Tools Graveyard :: Glean.js, task, P1)

Comment 1

[Beatriz Rizental [:brizental]]

From Glean.js security review report:

The storage will, however, be isolated from code on websites and other web extensions. The biggest risk there would be if there was a privilege-escalation attack into the context of the web extension using Glean.js, allowing malicious scripts to call Glean APIs or use the browser.storage.local APIs directly. That would be a risk to Glean data, but not caused by Glean.js. Glean-using extensions should be careful not to relax the default Content-Security-Policy that generally prevents these attacks.

Let's include this information somewhere on this page.

Comment 3

[GitHub Bugzilla PR Linker]

Attachment: Link to GitHub pull-request: https://github.com/mozilla/glean/pull/1656