Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers

["Brian Eaton" <eaton.lists@xxxxxxxxx>]

On 8/10/07, Anurag Agarwal <anurag.agarwal@xxxxxxxxx> wrote:
> The browser should check with the webserver which domains it can interact
> with (load files from or submit post data to, etc) for that website. How the
> check is implemented is upto the browser.

Please implement this!

Here are a few other ideas along the same lines:

http://www.webappsec.org/lists/websecurity/archive/2006-06/msg00070.html
http://www.modsecurity.org/blog/archives/2006/06/secure_browsing.html
http://taossa.com/index.php/2007/02/17/same-origin-proposal/

Cheers,
Brian

----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]