Who is/are the point of contact(s) for this review? Please provide a short description of the feature / application (e.g. problem solved, use cases, etc.): Please provide links to additional information (e.g. feature page, wiki) if available and not yet included in feature description: Does this request block another bug? If so, please indicate the bug number This review will be scheduled amongst other requested reviews. What is the urgency or needed completion date of this review? Please answer the following few questions: (Note: If you are asked to describe anything, 1-2 sentences shall suffice.) Does this feature or code change affect Firefox, Thunderbird or any product or service the Mozilla ships to end users? Are there any portions of the project that interact with 3rd party services? Will your application/service collect user data? If so, please describe If you feel something is missing here or you would like to provide other kind of feedback, feel free to do so here (no limits on size): Desired Date of review (if known from https://mail.mozilla.com/home/ckoenig@mozilla.com/Security%20Review.html) and whom to invite.

asa - any chance you can help find the right person to answer our questions?

:asa - can I get an update please?

(In reply to Curtis Koenig [:curtisk] from comment #0) > Who is/are the point of contact(s) for this review? Gavin, Justin, who owns migration on the engineering side now?

Multiple people are familiar with the code, and it's part of the Firefox module. No one's working on this at the moment, AFAIK. I'm not sure why we need a security review here.

This was marked for sec-review via the feature page (5 months ago) and from what I can see it was never done. I believe dveditz was one of the voices that mentioned we might want to look at this.

I suppose the security check was for settings import in bug 589589, we didn't do that part yet. I highly doubt we'd import any security setting though, we are quite zealous and picky about settings to import.