Access Control in and Around the Browser

摘要：

　　We conduct an analysis of access control mechanisms in the browser and note that support for mashups and defences against cross site scripting attacks are both moving from ad-hoc measures towards solutions where the browser enforces access control policies obtained from a host (CORS and CSP respectively).We also point out the degree of trust these solutions have to take for granted.

作者: Dieter Gollmann

作者单位: Hamburg University of Technology

会议类型: 国际会议

会议名称: The 10th International Conference on Information Security Practice and Experience(ISPEC 2014)(第十届信息安全实践国际会议)

会议地点: 福州

会议语种:英文

页码: 1-7

在线出版日期: 2014-05-05（万方平台首次上网日期，不代表论文的发表时间）