748187 - [Security Review]Browser API

Status: RESOLVED FIXED

(mozilla.org :: Security Assurance, task, P1)

Description

[Paul Theriault [:pauljt] (no longer reading bugmail)]

B2G contains a browser API so that a browser app can be developed (ie a browser written in HTML/JS/CSS). An API is needed to support this, and this bug is for tracking the security review of this API.

See link for background

Comment 3

[Paul Theriault [:pauljt] (no longer reading bugmail)]

Background information for security review

https://wiki.mozilla.org/Gaia/Browser
https://wiki.mozilla.org/WebAPI/BrowserAPI

Comment 4

[Paul Theriault [:pauljt] (no longer reading bugmail)]

We need to revisit this review now that Browser API is more complete now, and that multi-process has landed (?).

Comment 5

[Justin Lebar (not reading bugmail)]

(In reply to Paul Theriault [:pauljt] from comment #4)
> We need to revisit this review now that Browser API is more complete now,
> and that multi-process has landed (?).

Please file a new bug.

But honestly, I don't think a review is a particularly good use of time at this point.  This API lets the embedder totally own the generated content, so it's going to be trusted- and certified-only.  Given that this API will not be exposed to unreviewed content and no actionable items came out of the first review, and given the incredibly tight timeframe we're under, I think Dale, Ben, and my time would be better spent elsewhere.

If you disagree, let's discuss this in the new security review bug.

Comment 6

[Paul Theriault [:pauljt] (no longer reading bugmail)]

This was more a note to self (and david chan) - just trying to keep status of secreview bugs up to date. I don't imagine a formal review, just completing the one we already started now that browser API is closer to being finished (although I know there is a still a lot of work to do).

Comment 7

[Paul Theriault [:pauljt] (no longer reading bugmail)]

(In reply to Justin Lebar [:jlebar] from comment #5)
> (In reply to Paul Theriault [:pauljt] from comment #4)
> > We need to revisit this review now that Browser API is more complete now,
> > and that multi-process has landed (?).
> 
> Please file a new bug.
> 
> But honestly, I don't think a review is a particularly good use of time at
> this point.  This API lets the embedder totally own the generated content,
> so it's going to be trusted- and certified-only.  Given that this API will
> not be exposed to unreviewed content and no actionable items came out of the
> first review, and given the incredibly tight timeframe we're under, I think
> Dale, Ben, and my time would be better spent elsewhere.
> 
> If you disagree, let's discuss this in the new security review bug.

Created a new security bug (bug 830225) to discuss risks of exposing this API to Privileged Apps, and closing thus closing this bug out.