Top 5 Security Threats in HTML5
Dec 13, 2010, 19:35 (0 Talkback[s])
(Other stories by Aaron Weiss)
"To bridge the gap, Web developers have adopted and embraced a
variety of additional technologies, everything from using
client-side JavaScript to build needed features, relying on
server-side scripts to process data in ways the browser could not,
and using third-party plug-ins, such as Flash, to extend the
browser even further. All of these developments reflect the shift
from browser as document delivery platform to browser as Web
application platform.
"Now, with the nearly-complete standard for HTML5 being
implemented (at least in part) in the latest or beta versions of
all the major browsers, including Internet Explorer, Firefox,
Safari, Chrome, and Opera, many of the advanced Web app features
developers need will be available in native HTML.
"But with any major introduction of new features, HTML5 also
brings with it potential security vulnerabilities â€"
which is not to say that HTML5 is "flawed," but that, invariably,
there will be new attack vectors for hackers to exploit. Some
originate from elements of the standard itself, some from
implementations of the standard in each browser, and some from the
care that developers do (or do not) take in building their HTML5
code."
Complete Story
Related Stories: