One of the new features in Firefox 4 is the App Tab which lets users persist a tab that they use continuously. Firefox shrinks the tab down to just the favicon and places it in a special area for these tabs which generally aren’t closed by the user. The feature is great, but one of [...]
The most beautiful thing we can experience is the mysterious. It is the source of all true art and science. He to whom the emotion is a stranger, who can no longer pause and stand wrapped in awe, is as good as dead; his eyes are closed.
Archive for the ‘Mozilla’ Category
Jetpack: Unread Messages in Gmail App Tab
Friday, August 13th, 2010WordPress CSP Plugin
Friday, May 28th, 2010My implementation of the Content Security Policy server logic for WordPress is now available as a WordPress Plugin. Fig.1 – CSP configuration page making a policy recommendation. Fig. 2 – New panel in media uploader allows direct creation of script files in the uploads directory.
WordPress and Content Security Policy
Monday, April 12th, 2010Lately, I have been implementing the server logic for Content Security Policy in WordPress. Today, I posted my first patch to WordPress, still a work in progress, which adds an administration panel for configuring CSP. One of the features I’m rather happy with is “Suggest Policy”, which analyzes the content in the user’s blog and recommends a policy based on the content types and sources it finds.
Content Security Policy – Preview Builds
Thursday, October 1st, 2009I am excited to report that Content Security Policy is available for testing! We’ve been working hard on implementing the CSP spec and now the new features are ready to be put to the test. I would like to encourage any interested parties, whether web security researchers or website administrators, to grab a preview build of Firefox with CSP enabled and head over to the demo page to see it in action.
Content Security Policy – Update
Tuesday, April 7th, 2009I published another set of changes to the Content Security Policy proposal. We are getting very close to the implementation phase now, and I’ve made a final call for feedback. Sid and I are in the process of moving the documentation to the Mozilla Wiki, where the final specification will live.
Content Security Policy (was Site Security Policy)
Friday, September 5th, 2008I updated my web security proposal with a fairly large set of changes. I removed Cross Site Request Forgery from the scope of the proposal and instead will focus on the implementation of the Origin header. The syntax has also been expanded to allow policy creation for a larger set of content types, e.g. not [...]
Site Security Policy
Wednesday, June 4th, 2008I published a proposal for a set of browser security features that I hope to get turned into an open web standard and implemented in a future version of Firefox. The goal is create a mechanism that allows websites to communicate security policies to the browser which dictate how web content should behave.