Later archive addition

An Analysis of Browser Domain-Isolation Bugs and a Light-Weight Transparent Defense Mechanism

Shuo Chen, David Ross and Yi-Min Wang · Microsoft Research

Microsoft Research landing page for the CCS 2007 script-accenting paper. Carries the abstract only: browser domain isolation is too complex to audit exhaustively, so give each origin a random 'accent' key that scripts and HTML object names are XORed with, making cross-origin interference fail by construction.

Record

Researcher

Shuo Chen, David Ross and Yi-Min Wang

Published by

Microsoft Research

In the archive

• Added to the 2007 archive after the original list was published

Related sources

• Paper

Tags

• same-origin-policy
• sop-bypass
• mitigation
• defence
• iframe
• dom
• javascript
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Shuo Chen, David Ross and Yi-Min Wang, first published at the original source. Preserved copies are kept so the citation survives its host.