Record · corpus.blog/posts/01a0821c-33e0-72d8-a3ce-aeaa4396e046

With Carrots & Sticks - Can the browser handle web security?

Frederik Braun · published 7 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at frederikbraun.de Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 22
Words captured: 2,116

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://madweb.work/

madweb.work

https://www.w3.org/TR/upgrade-insecure-requests/

w3.org

Firefox deprecating HTTP Read at the source ↗

blog.mozilla.org

https://www.w3.org/TR/secure-contexts/

w3.org

https://blog.mozilla.org/security/2018/01/15/secure-contexts-everywhere/

blog.mozilla.org

https://cwe.mitre.org/top25/archive/2024/2024_cwe_top25.html

cwe.mitre.org

https://www.w3.org/TR/html-design-principles/

w3.org

Modern solutions against cross-site attacks Read at the source ↗

frederikbraun.de

https://blog.mozilla.org/en/products/firefox/firefox-rolls-out-total-cookie-protection-by-default-to-all-users-worldwide/

blog.mozilla.org

https://web.dev/articles/samesite-cookies-explained

web.dev

https://groups.google.com/a/chromium.org/d/msg/blink-dev/AknSSyQTGYs/YKBxPCScCwAJ

groups.google.com

https://datatracker.ietf.org/doc/draft-ietf-httpbis-rfc6265bis/

datatracker.ietf.org

https://www.adambarth.com/papers/2010/bates-barth-jackson.pdf

adambarth.com

Chrome switching the XSSAuditor to filter mode re-enables old attack Read at the source ↗

frederikbraun.de

https://www.gerv.net/security/content-restrictions/

gerv.net

https://github.com/google/security-research-pocs/tree/master/script-gadgets

github.com

https://almanac.httparchive.org/en/2024/security

almanac.httparchive.org

Finding and Fixing DOM-based XSS with Static Analysis Read at the source ↗

frederikbraun.de

https://static.googleusercontent.com/media/publicpolicy.google/en//resources/google_commitment_secure_by_design_overview.pdf

static.googleusercontent.com

https://github.com/WICG/sanitizer-api/

github.com

https://github.com/cure53/DOMPurify/

github.com

Hardening Firefox against Injection Attacks – The Technical Details Read at the source ↗

frederikbraun.de