> One part I'm not sure about is if we're saying we want to grant permissions 
> based on pinning, how will Gecko know when a site is pinned? Currently an app 
> is registered in the app registry when it's installed via the Apps API using 
> its app manifest so that Gecko knows about it. What should be the equivalent 
> in this new content model?


We discussed this in another thread, but Jonas convinced me that pinning will 
not have any security side-effects, and I’ve updated the permission model to 
reflect this [1]. 

I assume “installation” will remain for add-ons and will remain as gate to 
implicit permissions. 

[1] 
https://wiki.mozilla.org/Security/B2G/PermissionReview/New_permission_model#Web_Permissions
_______________________________________________
dev-b2g mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-b2g

Reply via email to