المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : How to Prevent DOM xss attack -shortened-



C# Programming
09-21-2013, 08:50 PM
1-How to make a sandbox that sandboxing and preventing Malicous Java script at URL address bar with such permissions like never change the title page , never change the images or flash or any other multimedia from outside in the page and never excute a code from outside ?

2-after detecting and preventing through Sandbox , how to take the piece of code which causes the problem from a big malicious script ? e.g. eval() is the responsible for making the problem so i want the program to catch for the 3rd step

3-if for example eval() is the bad function which causes the trouble then how to REPLACE it -mapping- with a safe function? -lets say only a mapping for eval() ,execScript , SetTimeOut , SetTimeInterval
innerHTML , outerHTML document.******s, ********.replace , ********.assign , script.src href , src , Iframe -

I red many articles but i didnt find safe mapping for unsafe functions


What are the safe mapping for those unsafe functions or properties??

I red this it was helpful but not complete:
https://developer.mozilla.org/en-US/docs/Web/**********/Reference/Global_Objects/eval[^]