{{ _('Packaged Apps') }}
+ {# L10n: Do not localize text in #}
{%- trans url='//developer.mozilla.org/docs/Apps/Manifest' %}
A packaged app is an Open Web App that has all of
its resources (HTML, CSS, JavaScript, app manifest, and so on)
@@ -46,123 +47,154 @@
{{ _('Types of packaged apps') }}
- {%- trans url_csp='//developer.mozilla.org/docs/Security/CSP/Introducing_Content_Security_Policy', - url_security='https://wiki.mozilla.org/Apps/Security', - url_default_csp='https://wiki.mozilla.org/Apps/Security#Default_CSP_policy', - url_bug='https://bugzilla.mozilla.org/show_bug.cgi?id=768029' %} - There are three types of packaged apps: -
-
-
- Privileged app -
-
+ {{ _('There are three types of packaged apps:') }}
+
-
+
- {{ _('Privileged app') }} +
-
+ {%- trans %}
A privileged app has been approved by the Firefox OS
Marketplace using a special process. It is meant to provide
more safety for users when an app wants access to certain
sensitive APIs on a device. It is equivalent to a native
app on a platform like iOS or Android. A privileged app
has the following characteristics:
-
-
-
-
+ {% endtrans -%}
+
-
+
- + {%- trans %} Approved by an app store after code review or equivalent. - -
- App's resources are signed by the app store. -
- + {% endtrans -%} + +
- {{ _("App's resources are signed by the app store.") }} +
- + {%- trans %} Allowed to use certain sensitive Web APIs that untrusted content cannot have access to. - -
- - Enforces a Content Security + {% endtrans -%} + +
-
+ {%- trans url='//developer.mozilla.org/en-US/docs/Apps/CSP' %}
+ Enforces a Content Security
Policy (CSP). A privileged app uses this CSP:
-
- "default-src *; script-src 'self'; object-src 'none'; style-src 'self' 'unsafe-inline'" -
-
- -
+ {% endtrans -%}
+
+ "default-src *; script-src 'self'; object-src 'none'; style-src 'self' 'unsafe-inline'" +
+
+ - + {%- trans url='https://wiki.mozilla.org/Apps/Security' %} Implements other requirements related to security. See - Security for more - information. - -
- -
+ {% endtrans -%}
+
- Certified app -
-
- A certified app is intended for a critical system function like
- the default dialer or the system settings app on a smartphone.
- This type of app would be used for critical functions on a
- Firefox OS phone. It is not intended for third party apps, so
- most app developers can disregard this type of app. A certified
- app is a packaged app that is similar to a privileged app,
- except that all device permissions are implicit, meaning they
- do not require explicit user approval. A certified app must be
- approved for a device by the OEM or carrier in order to have
- this implicit approval to use critical APIs. The following is
- the CSP for a certified app, which is slightly different from
- the CSP for a privileged app:
-
- "default-src *; script-src 'self'; object-src 'none'; style-src 'self'" -
- This has the effect of slightly looser rules for inline CSP for - privileged apps when compared to certified apps. If you want - more of the reasoning behind this, see + Security for more information. + {% endtrans -%} +