Saturday, October 3, 2009

firefox Configurable Security Policies

CAPS for all

Controle de Scripts needs more CAPS power

or we need something new from scratch

STOP being abused by JavaScript

What are Configurable Security Policies?

Mozilla's configurable security policies allow users to set up security policies for the browser, and also have different security policies for different Internet sites. The ideas for configurable security policies come from a number of sources. Bell Labs researchers Vinod Anupam and Alain Mayer have written papers and contributed code to Mozilla. The infamous bug 858 serves as a wish list for this sort of functionality. The code for this is called CAPS (capabilities). Finally, IE's zones employ some of this idea.
This document is aimed at programmers familiar with JavaScript.