Changes

* [[Security/CSP|Content Security Policy]] proposal and implementation * [[Security/STS|Strict Transport Security]] proposal to prevent network attacks on all-HTTPS sites * [[Security/Origin|Origin proposal for CSRF and clickjacking mitigation]] (i.e. anything that requires authentication of the origin of a request) * [[Security/ProcessIsolation|Process Isolation: Internal compartmentalization of Firefox architecture]]