devalias.net icon indicating copy to clipboard operation
devalias.net copied to clipboard
verified publisher icon 0xdevalias

[DeepDive] Website JavaScript plugin/extension sandboxing

Open 0xdevalias opened this issue 5 years ago • 0 comments

  • https://medium.com/zendesk-engineering/sandboxing-javascript-e4def55e855e
    • https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe
      • https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#attr-sandbox
      • https://developer.mozilla.org/en-US/docs/Web/HTTP/Feature_Policy/Using_Feature_Policy
    • https://developer.mozilla.org/en-US/docs/Web/API/Web_Workers_API
    • https://developer.mozilla.org/en-US/docs/Web/Web_Components
    • https://developers.google.com/caja/
      • https://github.com/google/caja : Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.

0xdevalias avatar Feb 05 '20 03:02 0xdevalias