Client-side JavaScript Vulnerabilities

It's time to deprecate JavaScript. It's security model and the language itself are appalling. As data moves into the cloud the JavaScript threat is increasing and I believe the only way to fix this is to start all over again. The 14 year old language and security model aren't up to today's threats. This document summarizes security issues with JavaScript and discusses vulnerabilities like cross-si

[efcl]

JavaScript Security AnalyzerというIBM製のDOM-based XSSなどの調査ツールについてのスライド