GitHub - Agoric/SES: MOVED to @agoric/ses-shim. SES (Secure EcmaScript) is a secure runtime for running third-party code safelyYou signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Into the Borg – SSRF inside Google production network | OpnSec
Intro – Testing Google Sites and Google Caja In March 2018, I reported an XSS in Google Caja, a tool to securely embed arbitrary html/javascript in a webpage. In May 2018, after the XSS was fixed, I realised that Google Sites was using an unpatched version of Google Caja, so I looked if it was vulnerable to the XSS. However, the XSS wasn’t exploitable there. Google Caja parses html/javascript and
Status of Caja Project? · Issue #1986 · googlearchive/caja
Caja is maintained by three-ish engineers in their spare time, one of whom only works on SES. Apps script is indeed moving away from caja, for a few reasons: developers are OK with using an asynchronous API for communication between sandboxed code and Google APIs users don't care about confinement; there's no demand for, say, a text editor that can't leak your files to the app developer everyone h
Distributed Electronic Rights in JavaScript
ESOP'13 22nd European Symposium on Programming, Springer (2013) Contracts enable mutually suspicious parties to cooperate safely through the exchange of rights. Smart contracts are programs whose behavior enforces the terms of the contract. This paper shows how such contracts can be specified elegantly and executed safely, given an appropriate distributed, secure, persistent, and ubiquitous comput
Caja hacking
Caja hacking Thursday, 30 August 2012 As you probably know I love JavaScript sandboxes and I spend a lot of spare time playing around with them on the net. One of them is Google Caja, if you don’t know what it is here is the description from the project “The Caja Compiler is a tool for making third party HTML, CSS and JavaScript safe to embed in your website. It enables rich interaction between th
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - drses/ses: Secure EcmaScript
caja/src/com/google/caja/plugin/html-sanitizer.js at master · googlearchive/caja
http://secappdev.org/handouts/2013/Tom%20Van%20Cutsem/tvcutsem_JS_Security.pdf
Shim status of ES6