Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

If an app is using a granted permission to respond to a calling app then it must check that the calling app as has that permission as well. Otherwise, the responding app may be granting privileges to the calling app that it should not have.  (This is sometimes called the "confused deputy" problem.)

...

It is not feasible to automatically detect whether an app's permissions need to be checked before responding to it.

Bibliography

 

...