Are we bringing in a new third party library for this? (Seems like yes?) Who else uses it/audits it? Does anyone else fuzz it? Is it in OSS-fuzz? Are we fuzzing it?
How does upstream behave? Do they cut releases or do they just have continual development and downstreams grab random versions of it? How do we plan to track security issues upstream? How do we plan to update it (mechanically and how often)? -tom On Thu, Oct 11, 2018 at 3:50 PM Boris Zbarsky <[email protected]> wrote: > On 10/11/18 11:43 AM, Andrew Osmond wrote: > > We are facing a growing number of webcompat reports against our > Gecko-derived > > Android offerings, where web developers assume Android and/or mobile > > implies support for WebP. > > In the past, I believe we objected to adding WebP for various reasons. > Do we feel that those reasons are now outweighed by the compat problems? > > -Boris > _______________________________________________ > dev-platform mailing list > [email protected] > https://lists.mozilla.org/listinfo/dev-platform > _______________________________________________ dev-platform mailing list [email protected] https://lists.mozilla.org/listinfo/dev-platform
