The idle API is currently available to all webpages. But per recent discussions on the mailing lists (dev-webapi, "should the idle service be exposed to the unprivileged web?"), we should only expose it to certified apps (and chrome).

This passes the two idle API tests locally, but just in case: https://tbpl.mozilla.org/?tree=Try&rev=87837531db53

Comment on attachment 649169 [details] [diff] [review] Patch, v1 Review of attachment 649169 [details] [diff] [review]: ----------------------------------------------------------------- ::: dom/base/Navigator.cpp @@ +653,5 @@ > nsCOMPtr<nsPIDOMWindow> win = do_QueryReferent(mWindow); > NS_ENSURE_TRUE(win, NS_ERROR_UNEXPECTED); > + > + nsCOMPtr<nsIScriptObjectPrincipal> winSOP = do_QueryInterface(win); > + NS_ENSURE_TRUE(winSOP, NS_ERROR_UNEXPECTED); What about using NodePrincipal() from window->GetExtantDocument()?

(In reply to Justin Lebar [:jlebar] from comment #0) Yeah. And even for privileged Web apps, I would prefer prompting the user whether to disclose the info. Or the warning when the user knights a page as privileged app has to be very clear about the implications.

Idle Timer stop working with System app this morning ... would it be possible because of this bug? |dump(navigator.addIdleObserver);| still return a function though and there were no JavaScript errors.

(In reply to Tim Guan-tin Chien [:timdream] (MoCo-TW) from comment #7) > Idle Timer stop working with System app this morning ... would it be > possible because of this bug? |dump(navigator.addIdleObserver);| still > return a function though and there were no JavaScript errors. Were there JS errors when you /called/ the function? Is the system app a certified app?

(In reply to Justin Lebar [:jlebar] from comment #8) > (In reply to Tim Guan-tin Chien [:timdream] (MoCo-TW) from comment #7) > > Idle Timer stop working with System app this morning ... would it be > > possible because of this bug? |dump(navigator.addIdleObserver);| still > > return a function though and there were no JavaScript errors. > > Were there JS errors when you /called/ the function? There wasn't. > Is the system app a certified app? I would be surprised if it's not. How do I check that?