Closed
Bug 1689571
Opened 5 years ago
Closed 5 years ago
Go through a security review for Glean.js
Categories
(Data Platform and Tools Graveyard :: Glean.js, task, P1)
Data Platform and Tools Graveyard
Glean.js
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: brizental, Assigned: brizental)
Details
No description provided.
|
Assignee | |
Updated•5 years ago
|
Assignee: nobody → brizental
Priority: P4 → P1
|
|
Assignee | |
Updated•5 years ago
|
Whiteboard: [telemetry:glean-js:m?]
|
|
Assignee | |
Updated•5 years ago
|
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
|
|
Assignee | |
Comment 1•5 years ago
|
||
The security review was completed with the given resolution:
I've completed the review of Glean.js used in a Web Extension context. I did not find additional security problems that were not addressed by the design and have no recommended changes. When you add Storage and Uploader implementations so that Glean.js can be used in a website context in a future version we'll want to check again that the security properties hold in that more hostile context.
For the complete review, refer to: https://docs.google.com/document/d/15SwOVhh9INJT1nXfYlfe5mdEZI1aUL3LeO92j89myqA/edit#
|
||
Updated•4 years ago
|
Product: Data Platform and Tools → Data Platform and Tools Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•