> == Types of runnables == > 0) None of the items listed here (drivers, cli tools, browser engine or > plugins) should be handled by Open Web Apps, but rather a separate process. > Out of scope.
But some apps may depends on something listed here. For example, if someone invents a device accessible via USB/Bluetooth, granting unlimited USB/Bluetooth interface access permission to apps want to talk with such devices may not the best idea. Introducing an verified driver and grant apps permissions to talk with this driver seems will be more safe and user friendly. Of course we don't have talk details on this topic here and now. > 1) Web apps should never be "packaged" in the sense of a bunch of assets > zipped up into one file and downloaded, they should always be hosted with a > every resource having a persistent, unique URL. Otherwise they're not "web" > apps, they're just apps. I think this can be a nice-to-have way to "pre-populate the appcache and installed manifests". > 2) All web apps should be non-local web apps, but with the ability to cache > resources locally. I mean web apps not hosted on localhost. Maybe it's unnecessary to emphasize. > 3) Non-installed web apps are essentially web sites viewed through a > browser app, or bookmarks. BTW, there also may be front-ends other than Gaia can open any URI as standalone apps. _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
