14.07.2013 Views

Basic web security model - Stanford Crypto Group

Basic web security model - Stanford Crypto Group

Basic web security model - Stanford Crypto Group

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Cross-origin Interaction<br />

Sites often need to communicate:<br />

Google AdSense:<br />

<br />

Mashups<br />

Gadget aggregators (e.g. iGoogle or live.com)<br />

Primary method: script inclusion; site A does:<br />

<br />

• Script from B runs in A’s origin: full control over A’s DOM<br />

• Note: to communicate with B, site A gives B full control !!

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!