JSCSP: A novel policy-based XSS defense mechanism for browsers

• Main Authors: XU, Guangquan, XIE, Xiaofei, HUANG, Shuhan, ZHANG, Jun, PAN, Lei, LOU, Wei, LIANG, Kaitai
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2022
• Subjects: Cross-site scripting attacks; content security policy; origin confinement; JavaScript sandbox; cookie protection; Programming Languages and Compilers; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/7083; https://ink.library.smu.edu.sg/context/sis_research/article/8086/viewcontent/09144421.pdf
• Institution: Singapore Management University

To mitigate cross-site scripting attacks (XSS), the W3C group recommends web service providers to employ a computer security standard called Content Security Policy (CSP). However, less than 3.7 percent of real-world websites are equipped with CSP according to Google’s survey. The low scalability of...