InfoQ Homepage Cross-Site Scripting Content on InfoQ
News
RSS Feed-
Experimental Trusted Types API to Combat Cross-Site Scripting Vulnerabilities
The Google Chrome team announces an experimental Trusted Types API to help combat DOM Cross-Site Scripting (XSS) security vulnerabilities. Google's Vulnerability Reward Program reports that DOM XSS is the most common XSS security variant.
-
Securing the Web with Decentralized Information Flow Control
Max Krohn and his colleagues at MIT developed a new end-to-end security architecture to help achieving data secrecy and integrity across complex Web Applications. In this talk and a series of papers, Max presents their findings and a use case based on MoinMoin Wiki.
-
Google Releases Open Source Web Application Security Assessment Tool
Google has announced the open source release of "ratproxy" - a passive web application security assessment tool.