Security/Reviews/ScreenSaverAPI

   

     Full Query    

2 Total; 0 Open (0%); 2 Resolved (100%); 0 Verified (0%);

• Property "SecReview feature goal" (as page type) with input value "1) Expose power management features to privileged gaia apps

  2) Allow content to request a wake lock for a resource - for each resource, content can hold a lock of state of locked, locked but not visible and unlocked. - not visible is only observed for some topics (e.g. it doesn't make sense for network or, perhaps, CPU)

  • Topics: Are they defined yet (apparently not)?
  • Mentioned so far:
    • CPU
    • Screen lock / brightness
    • Network lock
  • Suggestion from Lucas - At least on the Desktop, being able to grab the screenlock could be implicit if you're fullscreen or playing a video.

  2 weird things:

  1. it has 2 surfaces that are exposes; 1 to content,
  2. to privileged (see interface link above) - doesn't allow you to actually do anything - it allows you to request and monitor lock state
  • All the policy ends up happening either in gaia or chrome.js
  • 1 policy - things that aren't visible can't affect the" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.
  • Property "SecReview alt solutions" (as page type) with input value "* see [https://bugzilla.mozilla.org/show_bug.cgi?id=697132 bug 697132" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.
  • Property "SecReview threats considered" (as page type) with input value "* Battery flattening (by carelessly developed / malicious content) are discussed in [https://bugzilla.mozilla.org/show_bug.cgi?id=697132 bug 697132" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.
  • Property "SecReview threat brainstorming" (as page type) with input value "* There's a question around what kind of apps should be able to do various things (e.g. turn screen on / off, lock, CPU, etc)
  • What could go wrong with notifications (from the backend); these essentially result in js being executed" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.

Who bug Action By When Completed date [NEW] new [DONE] Done [MISSED] Miss

jlebar 764131 Fixing the b2g screen wake lock to have permissions

[NEW] new

1 Total; 0 Open (0%); 1 Resolved (100%); 0 Verified (0%);