Closed Bug 744946 Opened 8 years ago Closed 7 years ago

SDK Support for Firefox for Mobile Addons

Categories

(mozilla.org :: Security Assurance: Review Request, task, P2, blocker)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: curtisk, Assigned: mgoodwin)

References

()

Details

(Whiteboard: [pending secreview][start 2013-01-28][target 2013-01-31][score:27::Medium])

Who is/are the point of contact(s) for this review?
    
Please provide a short description of the feature / application (e.g. problem solved, use cases, etc.):
    
Please provide links to additional information (e.g. feature page, wiki) if available and not yet included in feature description:
    
Does this request block another bug? If so, please indicate the bug number This review will be scheduled amongst other requested reviews. What is the urgency or needed completion date of this review?

Please answer the following few questions: (Note: If you are asked to describe anything, 1-2 sentences shall suffice.)

Does this feature or code change affect Firefox, Thunderbird or any product or service the Mozilla ships to end users?

Are there any portions of the project that interact with 3rd party services?

Will your application/service collect user data? If so, please describe 

If you feel something is missing here or you would like to provide other kind of feedback, feel free to do so here (no limits on size):

Desired Date of review (if known from https://mail.mozilla.com/home/ckoenig@mozilla.com/Security%20Review.html) and whom to invite.
cc'd Matteo as he has done the most work on mobile to date - also cc'd irakli as he's the jetpack tech-lead
Assignee: nobody → zer0
My deepest apologies for the delay, I'm available for the sec review this Friday 22 or Monday 25. I should be available also the 2nd of July and the 4th.

> Please provide a short description of the feature / application (e.g. problem
> solved, use cases, etc.):

Makes SDK working on Firefox Mobile (Fennec)

> Please provide links to additional information (e.g. feature page, wiki) if
> available and not yet included in feature description:

Only few modules are ported, we're going to import more of them. Some additional details can be found here:
<https://addons.mozilla.org/en-US/developers/docs/sdk/latest/dev-guide/tutorials/mobile.html>
At the moment the feature is marked as experimental.

> Does this feature or code change affect Firefox, Thunderbird or any product 
> or service the Mozilla ships to end users?

No. At least, not directly. Of course this feature helps to create add-on on Fennec, so an add-on made in using that feature it could be able to "affect" Fennec.

> Are there any portions of the project that interact with 3rd party services?

No. At least, not directly as above. An add-on could interact with 3rd party services.

> Will your application/service collect user data? If so, please describe 

No. At least, not directly as above. An add-on could collect user data.
Assignee: zer0 → nobody
Whiteboard: [pending secreview][triage needed]
Assignee: nobody → mgoodwin
Status: NEW → ASSIGNED
Whiteboard: [pending secreview][triage needed] → [pending secreview][start yyyy-mm-dd][target yyyy-mm-dd]
Risk/Priority Ranking Exercise https://wiki.mozilla.org/Security/RiskRatings

Priority: 2 (P4) - Team Quarterly Goal

Operational: 0 - N/A
User: 0 - N/A
Privacy: 2 - Normal
Engineering: 5 - Blocker
Reputational: 3 - Major

Priority Score: 27
Severity: normal → blocker
Priority: -- → P2
Whiteboard: [pending secreview][start yyyy-mm-dd][target yyyy-mm-dd] → [pending secreview][start yyyy-mm-dd][target yyyy-mm-dd][score:27::Medium]
Matteo, please ping me when you've got some time to talk me through this.
Flags: needinfo?(zer0)
Whiteboard: [pending secreview][start yyyy-mm-dd][target yyyy-mm-dd][score:27::Medium] → [pending secreview][start 2013-01-28][target 2013-01-31][score:27::Medium]
Hi Mark, I'm available today if you have time. Otherwise let me know, we can arrange something in the coming days. You can also find me on IRC too (nickname: ZER0).
Flags: needinfo?(zer0)
There's very little fennec specific in the SDK. There are a couple of new cfx commands (these expose the developer, not the user) and a couple of re-implementations of existing functionality broken from the move to the native UI (relating to tabs and windows, for example).

I've looked at the fennec specific code and I'm happy we're not exposing addon devs (and therefore users of the addons they write) to things they don't expect.
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.