Improved Security In the Works for Firefox

<a href="http://www.theregister.co.uk/2008/05/20/new_firefox_security_protections">The Register</a>, <a href="http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9086458&intsrc=hm_list">Computerworld</a>

Jim Manico, OWASP Global Board Member

May 20, 2008

1 Min Read

Firefox developers are working to secure the browser with two new technologies they say will prevent the most prevalent types of Web site attacks.The first protection is designed to minimize end users' risk to cross-site scripting (XSS) attacks and cross-site request forgeries by enabling developers to white-list which domains can initiate or answer cross-site requests for code, cookies and other site resources. The second protection takes aim at DNS rebinding attacks by safeguarding routers and other devices barricaded behind firewalls with a wall that prevent public sites from accessing private resources on a company's intranet.

The technologies are still in their early stages. Meanwhile, Mozilla on Friday moved forward with the rollout of Firefox Release Candidate 1 (RC1), which includes performance enhancements, user interface changes, stability and compatibility fixes since the last beta.The Register, Computerworld

Read more about:

20082008

About the Author(s)

Jim Manico

OWASP Global Board Member

Jim Manico is a Global Board Member for the OWASP foundation where he helps drive the strategic vision for the organization. OWASP's mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. OWASP's AppSecUSA<https://2015.appsecusa.org/c/> conferences represent the nonprofit's largest outreach efforts to advance its mission of spreading security knowledge, for more information and to register, see here<https://2015.appsecusa.org/c/?page_id=534>. Jim is also the founder of Manicode Security where he trains software developers on secure coding and security engineering. He has a 18 year history building software as a developer and architect. Jim is a frequent speaker on secure software practices and is a member of the JavaOne rockstar speaker community. He is the author of Iron-Clad Java: Building Secure Web Applications<http://www.amazon.com/Iron-Clad-Java-Building-Secure-Applications/dp/0071835881> from McGraw-Hill and founder of Brakeman Pro. Investor/Advisor for Signal Sciences.

Never Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.

You May Also Like


More Insights