[Appendix C] C.3 JavaScript Security

Appendix C
Differences between Navigator 2.0 and 3.0

C.3 JavaScript Security

There have been several important changes to JavaScript security in Navigator 3.0. See Chapter 20, JavaScript Security for complete details.

The Document.domain() property allows large web sites that use multiple web servers to circumvent the restriction that scripts from one host can't read the properties of windows or documents that come from another host.
A new security model, based on data tainting, is experimental in Navigator 3.0. When enabled, this new model makes significant changes to the security restrictions placed on JavaScript programs. It also makes new properties and array elements of the History object available, and allows the value property of the Password object to be read.
The taint() and untaint() functions were added in Navigator 3.0 as part of the new data-tainting security model. The taintEnabled() method of the Navigator object was also added.


LiveConnect		Image Manipulation

file: /Techref/language/java/script/definitive/appc_03.htm, 4KB, , updated: 2019/10/14 15:00, local time: 2024/12/22 22:18,

^{3.23.103.14:LOG IN}

©2024 These pages are served without commercial sponsorship. (No popup ads, etc...).Bandwidth abuse increases hosting cost forcing sponsorship or shutdown. This server aggressively defends against automated copying for any reason including offline viewing, duplication, etc... Please respect this requirement and DO NOT RIP THIS SITE. Questions?

Please DO link to this page! Digg it! / MAKE!

<A HREF="http://sxlist.com/techref/language/java/script/definitive/appc_03.htm"> [Appendix C] C.3 JavaScript Security</A>

Did you find what you needed?

Welcome to sxlist.com!

Site supported by
sales, advertizing,
& kind contributors
just like you!
Please don't rip/copy
(here's why
Copies of the site on CD
are available at minimal cost.