Google fights DOM XSS with Trusted Types

DOM-based cross-site scripting (DOM XSS) attacks are one of the most prevalent and dangerous web security vulnerabilities. In DOM XSS attacks, malicious code is executed inside the browser, making them particularly difficult to detect and block. G… Continue reading Google fights DOM XSS with Trusted Types

Data in the browser is data at risk

Many third party web applications share sensitive data with parties other than the website owner. This sharing can be intentional or inadvertent, but to prevent breaches and manage risk, website owners should adopt a data-centric approach to secur… Continue reading Data in the browser is data at risk