[tbb-bugs] #25845 [Applications/Tor Browser]: TBA - Audit Progressive Web App (PWA) Implementation

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Apr 19 03:46:31 UTC 2018


#25845: TBA - Audit Progressive Web App (PWA) Implementation
------------------------------------------+------------------------
     Reporter:  sysrqb                    |      Owner:  tbb-team
         Type:  task                      |     Status:  new
     Priority:  Medium                    |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb-mobile
Actual Points:                            |  Parent ID:  #5709
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+------------------------
 [[https://en.wikipedia.org/wiki/Progressive_Web_Apps | Progressive Web
 Apps]] allow "installing" a webapp (some minimal version of a website) as
 an app on a phone/tablet (Android, iOS, ...). Basically, they're platform
 independent apps, using HTML/CSS/JS. This sounds useful, but if a user
 installs a PWA using TBA and then clicks the icon on their homescreen,
 does it open in TBA or in Firefox or does it let the user choose? This
 blog [1] shows there is a difference between the PWA homescreen-icon
 created by Chrome and created by Firefox, so the homescreen-icon probably
 links to the app that originally installed it, but we should make sure
 these nifty little programs don't introduce a complete proxy bypass
 because the user installs the app with TBA and then opens it with Fennec.

 [0] https://en.wikipedia.org/wiki/Progressive_Web_Apps
 [1] https://www.thurrott.com/mobile/android/146189/pwa-support-coming-
 firefox-android?sfw=pass1524109090
 [2] https://developer.mozilla.org/en-US/Apps/Progressive
 [3] https://developer.mozilla.org/en-US/Apps/Progressive/Installable_PWAs

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25845>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list