Cross-origin javascript capability leaks: detection, exploitation, and defense

摘要: We identify a class of Web browser implementation vulnerabilities, cross-origin JavaScript capability leaks, which occur when the leaks pointer from one security origin to another. devise an algorithm for detecting these vulnerabilities by monitoring "points-to" relation heap. Our finds number new in opensource WebKit engine used Safari. propose approach mitigate this adding access control checks engines. These are backwardscompatible because they do not alter semantics platform. Through application inline cache, we implement with overhead 1-2% on industry-standard benchmarks.