118
edits
Security/CSP/HistoryModule: Difference between revisions
→Threat Model
| Line 12: | Line 12: | ||
We further assume the web developer wishes to prevent the attacker from achieving the following goals: | We further assume the web developer wishes to prevent the attacker from achieving the following goals: | ||
*The attacker must not be able to determine whether a particular URL on the | *The attacker must not be able to determine whether a particular URL on the developer's web site has been visited previously. | ||
We assume that the browser properly implements the same-origin policy and does not contain any privilege escalation vulnerabilities. | We assume that the browser properly implements the same-origin policy and does not contain any privilege escalation vulnerabilities. | ||