On 02/05/13 13:59, Stefan Arentz wrote:
> 
> On 2013-05-02, at 2:19 AM, Junichi Hashimoto <[email protected]> wrote:
>> These issues are solved if WebActivity has an option to set the receiver
>> when it is invoked and has the sender information when it is passed to
>> the receiver. As the identity for the option and the information
>> manifest URL seems suitable.  I don't think to make another API for the
>> above purpose. To keep existing codes working the functionality should
>> be provided as an option.
> 
> Isn't this also how Android works? I think there are three things that can 
> happen on Android:
> 
> 1) If you start an activity and there is only one application registered to 
> handle that activity, that app is chosen and started without user interaction.

Web Activity should have a security layer on top of that behaviour: only
certified applications (or privileged too?) should be allowed to
automatically handle an activity unless the user explicitly asked for
that application to be the default handler.

> 2) If you start an activity and there are multiple applications registered to 
> handle that activity, the user is given a choice to choose the application 
> and also to mark the application as default. If the default is set then 
> Android will not ask you in the future.

Web Activity should indeed behave that way too.

> 3) If you start an activity and you send it to a specific application (by its 
> bundle id) then that the activity is passed to that app without user 
> interaction.

This is something that I believe shouldn't happen with Web Activity.
Android Intents also allow you to know the list of applications able to
handle a specific activity. That's not something we want, right?

A few weeks ago, I drafted an Inter App Communication API. This API has
a ton of security issues we should solve before implementing anything
but would such an API work for your use cases Hashimoto-san?

Cheers,
--
Mounir
_______________________________________________
dev-b2g mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-b2g

Reply via email to