Describe every mitigation between an applet and the user, in plain language.
The list is what the grants panel renders (D-003). Titles and summaries
avoid protocol vocabulary: they say network, applet and account. Every
mitigation is enabled in every profile; only the limit text changes.
Each summary claims only what is enforced where D-012 places it. kernl
sees each request just before the runtime handles it and cannot hold it
back, but it can have the runtime refuse that one request: a burst above
the per-second rate, a request over the smaller unfocused budget, an
oversized request, and any request from a hidden applet other than the
messages that keep its window controllable are described as refused.
Quarantine closes the applet before the request that crossed the limit is
handled, so that request is described as dropped.
Describe every mitigation between an applet and the user, in plain language.
The list is what the grants panel renders (D-003). Titles and summaries avoid protocol vocabulary: they say network, applet and account. Every mitigation is enabled in every profile; only the
limittext changes. Each summary claims only what is enforced where D-012 places it. kernl sees each request just before the runtime handles it and cannot hold it back, but it can have the runtime refuse that one request: a burst above the per-second rate, a request over the smaller unfocused budget, an oversized request, and any request from a hidden applet other than the messages that keep its window controllable are described as refused. Quarantine closes the applet before the request that crossed the limit is handled, so that request is described as dropped.