Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New ruleset for ExposeInterfacesToRenderer and RegisterBrowserInterfaceBindersForFrame in brave-core #424

Open
thypon opened this issue Nov 9, 2023 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@thypon
Copy link
Member

thypon commented Nov 9, 2023

Ruleset Name: Browser to Renderer API Exposure Check

  1. Rule 1: Identify Unnecessary API Exposure
    Description: This rule checks if there are APIs in the browser process that are unnecessarily exposed to the renderer process. It does this by scanning the code for any instances of APIs that are not required by the renderer but are still accessible.

  2. Rule 2: Check Renderer Code Accessing Mojom APIs
    Description: This rule scans the renderer code for any instances where it accesses Mojom APIs. This is done to ensure that the renderer is not accessing any APIs that it should not have access to.

  3. Rule 3: Check for Calls to ExposeInterfacesToRenderer
    Description: This rule checks for any calls to the ExposeInterfacesToRenderer function. This function is used to expose interfaces to the renderer, and unnecessary calls to this function can lead to security risks.

  4. Rule 4: Check for Calls to RegisterBrowserInterfaceBindersForFrame
    Description: This rule checks for any calls to the RegisterBrowserInterfaceBindersForFrame function. This function is used to register interface binders for a frame in the browser, and unnecessary calls to this function can lead to security risks.

This ruleset is designed to ensure that the browser process does not expose any unnecessary APIs to the renderer process, and that the renderer process does not access any APIs that it should not have access to. This is crucial for maintaining the security and integrity of the system.

Cc @diracdeltas @bridiver

@thypon thypon added the enhancement New feature or request label Nov 9, 2023
@thypon
Copy link
Member Author

thypon commented Nov 9, 2023

Anything specific for (1,2)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants