[[Security/CSP|Content Security Policy]] proposal and implementation
[[Security/Origin|Origin proposal for CSRF and clickjacking mitigation]] (i.e. anything that requires authentication of the origin of a request) [[Security/ProcessIsolation|Process Isolation: internal compartmentalization of Firefox architecture]]
===Mozilla Security resources and blogs ===