Skip to content
This repository has been archived by the owner on Feb 2, 2021. It is now read-only.

HowDoesCajaStopX

Jump to bottom
Kevin Reid edited this page Apr 16, 2015 · 1 revision

(legacy summary: FAQ explaining how Caja stops various kinds of attacks.)

How Does Caja Stop x

During the security review there were a lot of questions of the form "How does Caja stop x?". Below we answer that question for select x.

How Does Caja Stop Gadgets from Creating <iframe>s?

The tamed document object (see domita.js) intercepts calls to document.createElement and denies any elements not on a whitelist (see html4-defs.js). "iframe" is not on that whitelist.

Clone this wiki locally