3 ms·

Entry Point Regulation

• bmm6o 11y ago
  I understand the broad strokes here, but an extended example would clarify how exactly this prevents XSS.
  • deleted 11y ago
    [deleted]
• 0x0 11y ago
  I bet that developers writing XSSable IoT firmware web interfaces aren't exactly the type that would read a spec like this and implement it...
  • Eridrus 11y ago
    They're not going to see this spec, but if this gets implemented and awareness seeps out, at some point this should become standard practice as a way to mitigate unknown vulnerabilities without investing heavily in security. Companies love bandaids they can add on top without changing their code.