Notice: file_put_contents(): Write of 7572 bytes failed with errno=28 No space left on device in /var/www/tg-me/post.php on line 50
Solidot | Telegram Webview: solidot/26818 -
Telegram Group & Telegram Channel
加固 Firefox 前端

2025-04-10 14:23 by 蒲公英王朝2:风暴之墙

Firefox Application Security Team 安全团队在其博客 Attack & Defense 上发表文章,介绍了在加固 Firefox 前端上所做的工作。Firefox 的大部分 UI 是使用标准 Web 技术如 HTML、CSS 和 JavaScript 实现的,这么做的好处是可以在所有桌面操作系统上使用浏览器引擎渲染前端,缺陷是容易受到注入攻击。最常见的注入攻击是跨站脚本(Cross-Site Scripting 简写 XSS)攻击。为缓解 Firefox UI 的 XSS 和其它注入攻击,安全团队重新了逾 600 个 JavaScript 事件处理程序。这些代码将应用于 Firefox 下一个版本 v138(目前的稳定版本是 Firefox 137)。安全团队表示通过消除一整类攻击类型,他们大幅提高了攻击者利用 Firefox 的门槛。

Attack & Defense:Hardening the Firefox Frontend with Content Security Policies

#Firefox



tg-me.com/solidot/26818
Create:
Last Update:

加固 Firefox 前端

2025-04-10 14:23 by 蒲公英王朝2:风暴之墙

Firefox Application Security Team 安全团队在其博客 Attack & Defense 上发表文章,介绍了在加固 Firefox 前端上所做的工作。Firefox 的大部分 UI 是使用标准 Web 技术如 HTML、CSS 和 JavaScript 实现的,这么做的好处是可以在所有桌面操作系统上使用浏览器引擎渲染前端,缺陷是容易受到注入攻击。最常见的注入攻击是跨站脚本(Cross-Site Scripting 简写 XSS)攻击。为缓解 Firefox UI 的 XSS 和其它注入攻击,安全团队重新了逾 600 个 JavaScript 事件处理程序。这些代码将应用于 Firefox 下一个版本 v138(目前的稳定版本是 Firefox 137)。安全团队表示通过消除一整类攻击类型,他们大幅提高了攻击者利用 Firefox 的门槛。

Attack & Defense:Hardening the Firefox Frontend with Content Security Policies

#Firefox

BY Solidot


Warning: Undefined variable $i in /var/www/tg-me/post.php on line 283

Share with your friend now:
tg-me.com/solidot/26818

View MORE
Open in Telegram


Solidot Telegram | DID YOU KNOW?

Date: |

Telegram and Signal Havens for Right-Wing Extremists

Since the violent storming of Capitol Hill and subsequent ban of former U.S. President Donald Trump from Facebook and Twitter, the removal of Parler from Amazon’s servers, and the de-platforming of incendiary right-wing content, messaging services Telegram and Signal have seen a deluge of new users. In January alone, Telegram reported 90 million new accounts. Its founder, Pavel Durov, described this as “the largest digital migration in human history.” Signal reportedly doubled its user base to 40 million people and became the most downloaded app in 70 countries. The two services rely on encryption to protect the privacy of user communication, which has made them popular with protesters seeking to conceal their identities against repressive governments in places like Belarus, Hong Kong, and Iran. But the same encryption technology has also made them a favored communication tool for criminals and terrorist groups, including al Qaeda and the Islamic State.

Start with a fresh view of investing strategy. The combination of risks and fads this quarter looks to be topping. That means the future is ready to move in.Likely, there will not be a wholesale shift. Company actions will aim to benefit from economic growth, inflationary pressures and a return of market-determined interest rates. In turn, all of that should drive the stock market and investment returns higher.

Solidot from us


Telegram Solidot
FROM USA