Mike Adams: Developing Secure Widgets: Secure iFrame Communication in a Pre-postMessage World

Comments

3 responses to “Mike Adams: Developing Secure Widgets: Secure iFrame Communication in a Pre-postMessage World”

1. 

   mdawaffe

   September 7, 2011

   Relevant links:

   In development (can you find the bugs?) postMessage library with secure fallback:
   github.com/mdawaffe/xPostMessage

   More details for those looking for inspiration on how to craft real attacks:
   Securing Frame Communication in Browsers:
   A. Barth, C. Jackson, J. C. Mitchell — Stanford Web Security Group
   Proc. of the 17th USENIX Security Symposium. (USENIX Security 2008)
   seclab.stanford.edu/websec/frames/post-message.pdf

   Loading…

   Reply
2. 

   Mark Jaquith

   March 27, 2012

   So people don’t have to watch the whole talk to recall the punchline: Needham—Schroeder Protocol.

   Loading…

   Reply
3. 

   Daniel Bachhuber

   August 2, 2012

   Reblogged this on danielbachhuber.

   Loading…

   Reply