(Please reply-to [email protected])
Name of API: Alarm API
Reference:
https://groups.google.com/d/topic/mozilla.dev.webapi/pkx1uz_pnhQ/discussion
Brief purpose of API:
General Use Cases:Add an alarm (relaunch the app via alarm intentat a
future time)
Inherent threats:Annoyance
Threat severity: Low
== Regular web content (unauthenticated) ==
Use cases for unauthenticated code: Relaunch the app via an alarm
intent at a future time
Authorization model for normal content: None
Authorization model for installed content: Implicit
Potential mitigations: Should be a way to disable alarm for a given app
== Trusted (authenticated by publisher) ==
Same as for installed untrusted app
== Certified (vouched for by trusted 3rd party) ==
Same as for installed untrusted app
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
