Security/Reviews/Fennec Private Browsing

From New wiki
Jump to navigation Jump to search
Please use "Edit with form" above to edit this page.

Item Reviewed

Fennec Private Browsing
Target <bugzilla>

{ "id":"802251,794502,582244" }

</bugzilla>

{{#set:SecReview name=Fennec Private Browsing |SecReview target=<bugzilla> { "id":"802251,794502,582244" } </bugzilla> }}

Introduce the Feature

Goal of Feature, what is trying to be achieved (problem solved, use cases, etc)

  • port same private browsing features we have on desktop to our mobile platform
    • this is a per tab attribute
  • Most of the outstanding work is the platform bugs referenced in pb - the exception is the new tab issue (801646).

What solutions/approaches were considered other than the proposed solution?

  • parity with desktop

Why was this solution chosen?

`

Any security threats already considered in the design and why?

`

Threat Brainstorming

  • a new tab from private tab
    • does not remain private, this is a bug to be fixed (bug 801646)
  • how is UI different from desktop UI ? (it's per window for a start)
  • UI Mockups for tabs? Currently the tab turns purple..
  • test coverage - would like to reuse desktop tests if possible, ones in /browser will need fennec versions
  • identify places where things are written to disk - then determine how they should be handled in private browsing mode
    • for example, adding to the reading list - this is user initiated and maybe should be allowed to be done in pb mode etc ?
  • session restore / OOM killing - fennec can be killed in a low memory situation at any time, and then can be reloaded - we would in that case want to restore PB tabs too
    • We want to include PB tabs on OOM restore
    • don't want to do this in session store - put it in the Android bundle instead (but does this get written to disk ?)
    • chrome does restore private browsing tabs when they're relaunched after an OOM
  • addons - need to make sure they don't have access to anything that's temporarily persisted
    • Currently they will - see the Java / addons bug - 799631 and referenced (review to follow).

{{#set: SecReview feature goal=* port same private browsing features we have on desktop to our mobile platform

    • this is a per tab attribute
  • Most of the outstanding work is the platform bugs referenced in pb - the exception is the new tab issue (801646).

|SecReview alt solutions=* parity with desktop |SecReview solution chosen=' |SecReview threats considered=' |SecReview threat brainstorming=* a new tab from private tab

    • does not remain private, this is a bug to be fixed (bug 801646)
  • how is UI different from desktop UI ? (it's per window for a start)
  • UI Mockups for tabs? Currently the tab turns purple..
  • test coverage - would like to reuse desktop tests if possible, ones in /browser will need fennec versions
  • identify places where things are written to disk - then determine how they should be handled in private browsing mode
    • for example, adding to the reading list - this is user initiated and maybe should be allowed to be done in pb mode etc ?
  • session restore / OOM killing - fennec can be killed in a low memory situation at any time, and then can be reloaded - we would in that case want to restore PB tabs too
    • We want to include PB tabs on OOM restore
    • don't want to do this in session store - put it in the Android bundle instead (but does this get written to disk ?)
    • chrome does restore private browsing tabs when they're relaunched after an OOM
  • addons - need to make sure they don't have access to anything that's temporarily persisted
    • Currently they will - see the Java / addons bug - 799631 and referenced (review to follow).

}}

Action Items

Action Item Status In Progress
Release Target `
Action Items
<bugzilla>

{ "id":"804596,804597" }

</bugzilla>

{{#set:|SecReview action item status=In Progress

|Feature version=` |SecReview action items=<bugzilla> { "id":"804596,804597" } </bugzilla> }}