Firefox3.1/Geolocation Security Review

Overview

Provide Geolocation to the DOM.

http://dev.w3.org/geo/api/spec-source.html

Security and Privacy

• uses info bar to ask the user if it is okay to expose location
• has a concept of reducing precision of location exposed.

Exported APIs

http://mxr.mozilla.org/mozilla-central/source/dom/public/idl/geolocation/nsIDOMNavigatorGeolocation.idl#48

Exposed off of the navigator object

Module interactions

DOM / JS

Reliability

Configuration

Relationships to other projects

Review comments

1) Bug 463038 maximum number of watchPosition.

2) spec should be unsigned. could it be an object

3) Bug 463039 verify that clearWatch() can take arbitary values. add tests. DOM ERROR INVALID ACCESS error code approriate?

4) Bug 463041. Limit prompt to one time per page.