2 ms·
What would be a (simple) abstraction from browsers that would just thwart all these attacks? The main problem here seems to be the use of heuristics for identi
by xtacy 15y ago
What would be a (simple) abstraction from browsers that would just thwart all these attacks? The main problem here seems to be the use of heuristics for identifying malicious content.
One of the main problems is mixing code and data. Say there's a new HTTP header that tells the browser to disable inline scripts, would that help solve the problem?
- nbpoole 15y agoYou mean like https://developer.mozilla.org/en/Introducing_Content_Security_Policy https://developer.mozilla.org/en/Introducing_Content_Securit... ? ;-)