Bureaucrats, canmove, Confirmed users
647
edits
Security Severity Ratings/Client: Difference between revisions
Jump to navigation
Jump to search
→csectype- Keywords: adding csectype-site-isolation
(Removed some overly permissive encouragement) |
(→csectype- Keywords: adding csectype-site-isolation) |
||
| Line 167: | Line 167: | ||
|- | |- | ||
|csectype-side-channel || Disclosure of sensitive information or state through side-effects (typically, timing) | |csectype-side-channel || Disclosure of sensitive information or state through side-effects (typically, timing) | ||
|- | |||
|csectype-site-isolation || client security issues in limiting content processes to data and settings for a single site. distinct from web content csectype-sop and non-site-to-site csectype-priv-escalation | |||
|- | |- | ||
|csectype-sop || violations of the client Same Origin Policy including Universal-XSS (see also csectype-side-channel for less severe "leaks") | |csectype-sop || violations of the client Same Origin Policy including Universal-XSS (see also csectype-side-channel for less severe "leaks") | ||