This looks like a good read: http://www.adambarth.com/papers/2009/barth-weinberger-song.pdf http://www.adambarth.com/papers/2009/barth-weinberger-song.p... Cro

This looks like a good read: http://www.adambarth.com/papers/2009/barth-weinberger-song.pdf http://www.adambarth.com/papers/2009/barth-weinberger-song.p... Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense Although these vulnerabilities are imple- mentation errors in WebKit, the presence of the bugs illustrates the fragility of the general architec- ture. (Other browsers have historically had similar vulnerabilities [17, 18, 19].) We detail these vulner- abilities and construct proof-of-concept exploits to demonstrate how an attacker can leverage a leaked JavaScript pointer to inject a malicious script into an honest security origin.