Changes

Security/Sandbox/Hardening

103 bytes removed, 05:13, 2 December 2016

→‎Script Execution

* JS engine presents the largest attack surface in the browser

'''Objectives'''

* All untrusted javascript to be executed in the childTDB '''Controls''' TDB

'''Open Question'''

* What JS code is executed in the Chrome process?

* What JS contexts exist?

* Parent

** Firefox UI

** Js implemented web apis

** Web content

~~'''Controls''' ~~

~~tbd~~

~~'''Open Questions''' ~~

* Parts of service workers are currently executed in the parent.

Canmove, confirm

1,220

edits