4 ms·
What is the standard reference for DOM mastery?
by sadpluto 14y ago
What is the standard reference for DOM mastery?
- yan 14y agoThis is a very good starting document: http://code.google.com/p/browsersec/ http://code.google.com/p/browsersec/ (Also, anything icamtuf touches is probably going to be good.)
- tptacek 14y agoI'd start with _The Tangled Web_ by Zalewski.
- wglb 14y agoAnother document worthy of some study is http://lcamtuf.coredump.cx/postxss/ http://lcamtuf.coredump.cx/postxss/
- tptacek 14y agoYes! This is a great paper which made surprisingly little noise given how important it is. The idea is: stipulate that no attacker can ever inject Javascript into a browser. Assume we solve that problem completely. Now, how secure are DOM-based applications? Turns out: not that much more secure. Lots of very clever examples.