Closed Bug 751006 Opened 10 years ago Closed 6 years ago

[Security Review] B2G WiFi Review

Categories

(mozilla.org :: Security Assurance, task, P2)

x86
macOS

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: pauljt, Assigned: pauljt)

References

Details

(Whiteboard: [pending secreview][start 2012/05/08][target yyyy/mm/dd])

Enumerate available WiFi networks, get signal strength and name of currently connected network, etc.
Expanding this review to include all things Wifi related for B2G.
Blocks: b2g-wifi
Summary: [Security Review] WiFi Information API → [Security Review] B2G WiFi Review
Assignee: nobody → ptheriault
Status: NEW → ASSIGNED
Background information
--------------------------
IDL outlines API see dom code for wifi access: 
http://mxr.mozilla.org/mozilla-central/source/dom/wifi/


Allows reading wifi state, AND modifying state (associating etc)
Requires permission: http://mxr.mozilla.org/mozilla-central/source/dom/wifi/DOMWifiManager.js#39

Use cases: https://etherpad.mozilla.org/WifiInfoSec

Discussion:
http://groups.google.com/group/mozilla.dev.webapi/browse_thread/thread/ed980c42261c5f4a

(note that it definitely not just read access though, allows associating to networks)
Whiteboard: [pending secreview][start mm/dd/yyyy][target mm/dd/yyyy] → [pending secreview][start 2012/05/08][target yyyy/mm/dd]
Priority: -- → P1
Priority: P1 → P2
Assignee: ptheriault → nobody
please don't assign bugs to nobody, they show up in triage :)
Assignee: nobody → ptheriault
(In reply to Paul Theriault [:pauljt] from comment #3)
> Review documented here https://wiki.mozilla.org/Security/Reviews/SettingsAPI
Should I be worried about a link regarding the SettingsAPI in the Wifi bug? :-/
Flags: needinfo?(ptheriault)
Ignore comment 3, I must have commented in this instead of bug 750992. I'm aware this review still needs documenting, but it's lower priority since its certified only.
Flags: needinfo?(ptheriault)
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.