[tbb-bugs] #25845 [Applications/Tor Browser]: TBA - Audit Progressive Web App (PWA) Implementation
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Apr 19 03:46:31 UTC 2018
#25845: TBA - Audit Progressive Web App (PWA) Implementation
------------------------------------------+------------------------
Reporter: sysrqb | Owner: tbb-team
Type: task | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Keywords: tbb-mobile
Actual Points: | Parent ID: #5709
Points: | Reviewer:
Sponsor: |
------------------------------------------+------------------------
[[https://en.wikipedia.org/wiki/Progressive_Web_Apps | Progressive Web
Apps]] allow "installing" a webapp (some minimal version of a website) as
an app on a phone/tablet (Android, iOS, ...). Basically, they're platform
independent apps, using HTML/CSS/JS. This sounds useful, but if a user
installs a PWA using TBA and then clicks the icon on their homescreen,
does it open in TBA or in Firefox or does it let the user choose? This
blog [1] shows there is a difference between the PWA homescreen-icon
created by Chrome and created by Firefox, so the homescreen-icon probably
links to the app that originally installed it, but we should make sure
these nifty little programs don't introduce a complete proxy bypass
because the user installs the app with TBA and then opens it with Fennec.
[0] https://en.wikipedia.org/wiki/Progressive_Web_Apps
[1] https://www.thurrott.com/mobile/android/146189/pwa-support-coming-
firefox-android?sfw=pass1524109090
[2] https://developer.mozilla.org/en-US/Apps/Progressive
[3] https://developer.mozilla.org/en-US/Apps/Progressive/Installable_PWAs
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25845>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list