Closed Bug 602101 Opened 14 years ago Closed 14 years ago

Check timestamp in the manifest before following instructions

Categories

(Mozilla Labs :: Labs Pack, defect)

defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: Mardak, Assigned: Mardak)

References

Details

The timestamp can be used to: 1) make sure we don't process an older manifest than one we've already processed 2) only accept recent manifests from the last 30 days for 1: we can store previous timestamps in a pref and check if newTimestamp <= oldTimestamp then ignore for 2: if new Date(newTimestamp) < new Date(Date.now() - 30*24*6060*1000) then ignore There might be issues for 2 if the user's clock is wrong, but the manifest/signature are served over ssl which needs a somewhat accurate clock to begin with.
http://hg.mozilla.org/labs/sigma/rev/21d4d6557e27 Read out the timestamp from the manifest and make sure it exists and is newer than the previous timestamp.
Assignee: nobody → edilee
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Blocks: 602403
Blocks: 602624
You need to log in before you can comment on or make changes to this bug.