Mozilla Aims At Reducing XSS Flaws Thanks To New Technology

Mozilla foundation has announced that it is working on a new technology that could help in tackling the gruesome threat of Cross-Site Scripting (XSS) attacks, which have been inflicting damages to websites since several years.

XSS flaws pave way for malicious codes to be injected into genuine websites, which users feel free to click, leading to tricking users to steal their crucial information.

In a bid to take on the soaring XSS attacks, Mozilla has come up with a new technology, codenamed as “Content Security Policy”, which aims at handling the attacks by enabling website administrators to set directives notifying about the trustworthy domains.

Along with the capability of handling XSS, CSP also tries to address packet sniffing as well as clickjacking attacks by pinning down directives for which domains can integrate resources and need https.

Asserting on the benefits of the new security tool, Brandon Sterne, Mozilla's security programme manager, said in a statement, “Because CSP can be configured to notify the protected site when an attack is blocked, CSP will even benefit users of older browsers, by helping sites and plug vulnerabilities quickly”.

Article continues after advert

The open source foundation claimed that CSP will be completely backward compatible, and won't affect browsers and websites which don't support it.

and join more than 1600 other followers.