HTML5_Web_Security_v1.0</title> <meta name="Subject" content=""> <meta name="Keywords" content=""> <meta name="Author" content="Michael Schmidt"> <meta name="Creator" content="Microsoft Office Word- Word-Addin 6.61.5623"> <meta name="Producer" content="eD
Compass Security AG Werkstrasse 20 Postfach 2038 CH-8645 Jona T +41 55 214 41 60 F +41 55 214 41 61 team@csnc.ch www.csnc.ch HTML5 web security December 6th, 2011 Document Name: HTML5_Web_Security_v1.0.docx Version: v1.0 Author: Reviewer: Michael Schmidt, Compass Security AG Thomas Röthlisberger, Compass Security AG Date of Delivery: December 6th, 2011 Classification: Article HTML5 web security –
[PDF] Attacking with HTML5 (slides)
ATTACK & DEFENSE labs Attacking with HTML5 Lavakumar Kuppan ATTACK & DEFENSE labs Who am I ? • Web Security Researcher • ½ of Attack and Defense Labs, www.andlabs.org • Penetration Tester @ really big bank • Author of Imposter & Shell of the Future • Likes HTML5 @lavakumark Disclaimer: Views expressed in this talk are my own and does not necessarily reflect those of my employer Black Hat Abu Dhabi
HTML 5.2: 4.13. Common idioms without dedicated elements
Firefox38+Safari9.1+Chrome38+Opera?Edge79+Edge (Legacy)13+Internet ExplorerNoFirefox Android?Safari iOS?Chrome Android?WebView Android?Samsung Internet?Opera Android? Categories:Flow content.Phrasing content.Embedded content.Palpable content.Contexts in which this element can be used:Where embedded content is expected.Content model:Zero or more source elements, followed by one img element, optiona
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
[PDF] HTML 5 Modern Day Attack And Defence Vectors
XSS and CSRF with HTML5
[PDF] Attacking with HTML5 (whitepaper)
HTML5 Security Cheatsheet
html5security - Project Hosting on Google Code
Twitter / hoshikuzu: あ？onイベントでない属性でjavascriptを起 ...