Perform Security Review for Firefox Start Page



7 years ago
7 years ago


(Reporter: ckoehler, Unassigned)






7 years ago
1. Who is/are the point of contact(s) for this review?


2. Please provide a short description of the feature / application (e.g. problem solved, use cases, etc.):

We are assuming the hosting of the default homepage for Firefox 3.6 users (previously The page will include increasingly disruptive and urgent messaging to encourage users to upgrade.

3. Please provide links to additional information (e.g. feature page, wiki) if available and not yet included in feature description:

4. Does this request block another bug? If so, please indicate the bug number

bug 734203

5. This review will be scheduled amongst other requested reviews. What is the urgency or needed completion date of this review?

Dark launch Friday, 4/20.
Public launch Tuesday, 4/24.

6. Please answer the following few questions: (Note: If you are asked to describe anything, 1-2 sentences shall suffice.)

6a. Does this feature or code change affect Firefox, Thunderbird or any product or service the Mozilla ships to end users?

Yes, this feature changes the default start page for users of Firefox 3.6 and earlier.

6b. Are there any portions of the project that interact with 3rd party services?

We are using Webtrends analytics.

6c. Will your application/service collect user data? If so, please describe 

Nothing other than what Webtrends collects.

7. If you feel something is missing here or you would like to provide other kind of feedback, feel free to do so here (no limits on size):


8. Desired Date of review (if known from and whom to invite. 

Project is complete enough that the review can begin now.
Whiteboard: [pending secreview] → [pending secreview][triage needed]
[Triage] We don't see a need to review this from a security perspective, and privacy is already covered.
Last Resolved: 7 years ago
Keywords: sec-review-needed → sec-review-complete
Resolution: --- → FIXED
Whiteboard: [pending secreview][triage needed]
Assignee: nobody → mgoodwin
Assignee: mgoodwin → nobody
Keywords: sec-review-complete
You need to log in before you can comment on or make changes to this bug.