Record · corpus.blog/posts/01a0ca89-e794-7351-b455-b920922ef42e

Towards native security defenses for the web ecosystem

Google Security Blog · published 22 July 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at security.googleblog.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 39
Words captured: 1,667

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://web.dev/trusted-types/

web.dev

Reshaping web defenses with strict Content Security Policy Read at the source ↗

security.googleblog.com

https://web.dev/fetch-metadata

web.dev

https://web.dev/coop-coep/

web.dev

https://www.google.com/about/appsecurity/learning/xss/

google.com

https://portswigger.net/web-security/csrf

portswigger.net

https://github.com/xsleaks/xsleaks/wiki/Browser-Side-Channels

github.com

https://www.w3.org/History/1989/proposal.html

w3.org

https://spaf.cerias.purdue.edu/tech-reps/823.pdf

spaf.cerias.purdue.edu

https://portswigger.net/web-security/sql-injection

portswigger.net

https://portswigger.net/web-security/os-command-injection

portswigger.net

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMdGF81Wp6M_TfY_TjQf7bNVy_rTwJEUp7CQ4ONSYsg0Lv1pd0UCrnSLJfOyC6aTZRNAykjXUI6sMZVrwnY9Qn2XlsXUvBZji49zp18jOAxOPHE0Rq80e0byia2BgMZrmJjH1Seh-Qg6Q6/s1600/image1.png

blogger.googleusercontent.com

http://web.dev/trusted-types

web.dev

https://web.dev/authors/koto/

web.dev

https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML

developer.mozilla.org

https://portswigger.net/web-security/cross-site-scripting/dom-based

portswigger.net

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRLn9GcGzG31A3fJL7buD3S-4aNnAadmZRE58qO1tMZlCCHf5m5a6mbkckOvAHoqa5EQu4fc0sKnG_0GJndeQvwGZe4u7YdAXqM92Um4A5QE1yTxLCGXdPTfrztaM68y7v9RzfLstz_79J/s1600/content+securty+policy+image.png

blogger.googleusercontent.com

https://myactivity.google.com/

myactivity.google.com

https://github.com/w3c/webappsec-trusted-types

github.com

https://portswigger.net/web-security/cross-site-scripting/reflected

portswigger.net

https://portswigger.net/web-security/cross-site-scripting/stored

portswigger.net

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaqjAakJjBTk2DAivpijWFD-1WM9qY-VQeKvTtv4gqepdtWS9H7JFLxQQoiJGK7igaj2oGDVbvlEg-f6s2YHGjXMSZOWR3faXKOtVEvV0lCsvPpu5IYpjVdr9Cr18ZjRDDhMB0nE75NmYl/s1600/randomvalue.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge9qJfJFoMYeDbNhS62CvUWsEfqMzpSkCJiiKKzOPTqDo81bvw71EpB_h_FEYiRjFtwrA2xk7mf8cicgzSDCyRRiVioUysCrt_lGLgRb2DkNBiXExOK4I8EC8XeDdFWn64P5rV1iK8ZW7_/s1600/script+nonce.png

blogger.googleusercontent.com

http://csp-evaluator.withgoogle.com/

csp-evaluator.withgoogle.com

https://speakerdeck.com/mikispag/content-security-policy-a-successful-mess-between-hardening-and-mitigation

speakerdeck.com

http://csp.withgoogle.com/

csp.withgoogle.com

http://web.dev/fetch-metadata

web.dev

https://web.dev/authors/lwe/

web.dev

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOw6vZ660VtnNz3lw-GC9W76WqoIgkSPmKZyvPI2To2XydYscApXig5lbyrXrqCrQnOjNERlBzQqL5uXqyaJ4Gl9wY7qPRJDN_FtQ2dBqH0DRQp0O0LVY52gT7s_palLGFCeobO-355HNd/s1600/image2.png

blogger.googleusercontent.com

https://developer.mozilla.org/en-US/docs/Web/HTTP/Cross-Origin_Resource_Policy_(CORP

developer.mozilla.org

http://resourcepolicy.fyi/

resourcepolicy.fyi

http://web.dev/coop-coep

web.dev

https://web.dev/authors/agektmr/

web.dev

https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage

developer.mozilla.org

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXXo48yO67FbZRPnZpSht5nQ4Y3ly-j9BJIpOOhGSy7UiDS0uioFXG8gwfIe4y5xhdoooa1ouyWCL_QzVr_PyomXp_vijOmM1PCleCw5eHIU3huEUxtBDxiP3d2ep4T0hQKhyIditv_Uir/s1600/image3.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZvsDAkn55uClu_IwacsbGCohgmhDmVoBsg1gY7Uk3a5NKTDY1JDV0UphiObp-gh9hRKER_p6PjVxlkQ3YYlrJ-DN28WNHawf-LJdkdlhjjOXFogiDF337vDWyv1132Jk87oZiNV-8MQQd/s1600/image3+for+blog.png

blogger.googleusercontent.com

https://docs.google.com/document/d/1zDlfvfTJ_9e8Jdc8ehuV4zMEu9ySMCiTGMS9y0GU92k/edit

docs.google.com

https://speakerdeck.com/lweichselbaum/o-securing-web-apps-with-modern-platform-features

speakerdeck.com

https://www.youtube.com/watch?v=DDtM9caQ97I

youtube.com