Bibliotheek

HTTPS-Only: Upgrading all connections to https in Web Browsers

Hardening Firefox against Injection Attacks

Web browsers display content using HTML, CSS, and JavaScript, which can be untrusted and potentially malicious. Firefox uses these same technologies for both its interface and web content, creating security challenges.

Can we build a privacy-preserving web browser we all deserve?

The web is the biggest legacy application ever developed or supported by software engineers, but it's also blurring the line between the consumption of data and the leaking of personal details. Browser makers may be the only line of defense.

Extending the Same Origin Policy with Origin Attributes

This work re-designs a web browsers architecture and builds Origin Attributes directly into a browsers rendering engine to allow any specification or web technology to integrate into Origin Attributes with minimal engineering effort and reduces the risk of jeopardizing an end user’s security.

Enforcing Content Security by Default within Web Browsers

Injecting CSP for Fun and Security