Locked HTML5 Web Security v.1.0

[sQuo]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

This article is an extract of the master thesis written by Michael Schmidt. The security relevant aspects of HTML5 that were considered in this thesis are covered in the subsequent document.It needs to be considered that the content of this document was released in May 2011. Compass Security makes regular updates to its HTML5 security know how and provides additional information

 

HTML5 Web Security describes issues, vulnerabilities, threat & attack scenarios and countermeasures across 80 pages including numerous well thought-out diagrams, and is backed up with detailed references and an appendix full of attack details.

 

The main sections are:

2.2 Cross-origin resource sharing

2.3 Web storage 2.4 Offline web application

2.5 Web messaging

2.6 Custom scheme and content handlers

2.7 Web sockets API

2.8 Geolocation API

2.9 Implicit relevant features of HTML5

Web workers, new elements, attributes and CSS, Iframe sandboxing and server-sent events

 

If you are already developing HTML, or planning to, read this document as soon as possible and update your requirements documents, specifications, design documents, coding standards, and test plans to incorporate the knowledge.

 

Source

This is the hidden content, please

• Sign In
• or
• Sign Up

 

Download PDF

This is the hidden content, please

• Sign In
• or
• Sign Up