Preventing Capability Leaks in Secure JavaScript Subsets

by Matthew Finifter , Joel Weinberger , Adam Barth

Citations:

6 - 1 self

Datum	Value	Source
TITLE	Preventing Capability Leaks in Secure JavaScript Subsets	SVM HeaderParse 0.2
AUTHOR NAME	Matthew Finifter	SVM HeaderParse 0.2
AUTHOR AFFIL	University of California, Berkeley	SVM HeaderParse 0.2
AUTHOR NAME	Joel Weinberger	SVM HeaderParse 0.2
AUTHOR AFFIL	University of California, Berkeley	SVM HeaderParse 0.2
AUTHOR NAME	Adam Barth	SVM HeaderParse 0.2
AUTHOR AFFIL	University of California, Berkeley	SVM HeaderParse 0.2
ABSTRACT	Publishers wish to sandbox third-party advertisements to protect themselves from malicious advertisements. One promising approach, used by ADsafe, Dojo Secure, and Jacaranda, sandboxes advertisements by statically verifying that their JavaScript conforms to a safe subset of the language. These systems blacklist known dangerous properties that would let advertisements escape the sandbox. Unfortunately, this approach does not prevent advertisements from accessing new methods added to the built-in prototype objects by the hosting page. In this paper, we show that onethird of the Alexa US Top 100 web sites would be exploitable by an ADsafe-verified advertisement. We propose an improved statically verified JavaScript subset that whitelists known-safe properties using namespaces. Our approach maintains the expressiveness and performance of static verification while improving security. 1	SVM HeaderParse 0.2
CITATIONS	18 found	ParsCit 1.0