search

sysapps / runtime

Runtime and Security Model for Hosted Web Applications and Packaged Applications
6 stars 13 forks source link

RuntimeInstaller interface needs to be marked as privileged API #81

Closed marcoscaceres closed 11 years ago

marcoscaceres commented 11 years ago

RuntimeInstaller interface is a privileged API and should not be accessed by untrusted application. We should prohibit untrusted application to install other applications. I found no such information is highlighted in the spec.

mounirlamouri commented 11 years ago

What is RuntimeInstaller? Isn't that from the Samsung spec? Our model is to allow any web page to install an application (we use a doorhanger as a confirmation in Firefox). The spec says that the installation should happen if the UA "allows" the installation [1] which is a bit vague. Maybe it should be clearer? If that is the case, please open another issue.

[1] http://runtime.sysapps.org/#widl-ApplicationRegistry-install-DOMRequest-DOMString-manifestUrl-Object-parameters