WebAPI/Security/Battery

Battery API

General Use Cases: Adjust app behavior based upon power status

Reference:

• https://bugzilla.mozilla.org/show_bug.cgi?id=678694
• http://dvcs.w3.org/hg/dap/raw-file/tip/battery/Overview.html
• https://groups.google.com/d/topic/mozilla.dev.webapps/vNhpn299aG0/discussion

Note from the W3C spec:

The API defined in this specification is used to determine the battery
status of the hosting device. The information disclosed has minimal
impact on privacy or fingerprinting, and therefore is exposed without  
permission grants. For example, authors cannot directly know if there is
a battery or not in the hosting device.

Inherent threats: Fingerprinting, abuse of battery?

Threat severity: Low

Type	Use Cases	Authorization Model	Notes & Other Controls
Web Content	Same as general	Unrestricted
Installed Web Apps	Same as general	Unrestricted
Privileged Web Apps	Same as general	Unrestricted
Certified Web Apps	Same as general	Unrestricted