http://www.foxiewire.com/tag/slashdot The taxonomy view with a depth of 0. en http://www.foxiewire.com/Mozilla-Experimental/Slashdot__Mozilla_Experiments_With_Site_Security_Policy <p>Mozilla has opened comments for an new experimental browser security policy, dubbed <a href="http://people.mozilla.com/%7Ebsterne/site-security-policy/">Site Security Policy</a> (SSP), designed to protect against XSS, CSRF, and malware-laced IFRAME attacks which infected over <a href="http://ddanchev.blogspot.com/2008/05/malware-domains-used-in-sql-injection.html">1.5 million pages Web earlier this year</a>. Security experts and developers are excited because SSP extends control over Web 2.0 applications that allow users to upload/include potentially harmful HTML/JavaScript such as on iGoogle, eBay Auction Listings, Roxer Pages, Windows Live, MySpace / Facebook Widgets, and so on. Banner ads from CDNs have had similar problems with <a href="http://blog.washingtonpost.com/securityfix/2008/01/malwarelaced_banner_ads_at_mys.html">JavaScript malware on social networks</a>. The prototype <a href="http://people.mozilla.com/%7Ebsterne/site-security-policy/download.html">Firefox SSP add-on</a> aims to provide website owners with granular control over what the third-party content they include is allowed to do and where its supposed to originate. No word if Internet Explorer or Opera will support the initiative.</p> http://www.foxiewire.com/Mozilla-Experimental/Slashdot__Mozilla_Experiments_With_Site_Security_Policy#comments Mozilla Experimental mozilla security slashdot Fri, 06 Jun 2008 15:41:23 -0500 LouCypher 2937 at http://www.foxiewire.com http://www.foxiewire.com/Mozilla/Slashdot__Mozilla_Dev_Team_On_Firefoxs_Success <p>If you're thinking about open sourcing a project in the near future, Mozilla might be the perfect blueprint to follow. At last week's Mesh 2008 conference in Canada, Mike Shaver, chief technology evangelist and founding member at Mozilla, and John Resig, a JavaScript evangelist at Mozilla &mdash; two of the key figures behind the success of Mozilla's Firefox Web browser &mdash; listed inclusivity and transparency as two of the <a href="http://www.itworldcanada.com/a/Daily-News/de19357b-deee-4e5a-8880-bfba9513955a.html">top cornerstones of any community-built project</a>. Shaver said in this interview that because the Web is intended for everybody, the level same openness should be shared with Firefox's open source contributors.</p> http://www.foxiewire.com/Mozilla/Slashdot__Mozilla_Dev_Team_On_Firefoxs_Success#comments Mozilla developer interview mozilla slashdot Mon, 26 May 2008 11:21:51 -0500 LouCypher 2767 at http://www.foxiewire.com