Content Security Policy (CSP) is a recent W3C standard introduced to prevent and mitigate
the impact of content injection vulnerabilities on websites. In this article, we introduce a …

HTTPS aims at securing communication over the Web by providing a cryptographic
protection layer that ensures the confidentiality and integrity of communication and enables …

Sharing files with specific users is a popular service provided by various widely used
websites, eg, Facebook, Twitter, Google, and Dropbox. A common way to ensure that a …

Web push notifications are becoming an increasingly prevalent capability of modern web
apps, intended to create a direct communication pipeline with users and increase user …

Unexpected interactions of linguistic elements of software often produce unexpected
composable computational artifacts called weird machines. Using the RPM package …

The new Web standard HTML5 makes a webpage provide dynamic functions to users
without additional plug-ins such as ActiveX, Flash and Silverlight. Most attacks on web …

Exploitation as code reuse: On the need of formalization Page 1 DE GRUYTER
OLDENBOURG it – Information Technology 2017; 59(2): 93–100 Sergey Bratus* and Anna …

Leaky resource attacks leverage the popularity of resource-sharing services to conduct
targeted deanonymization on the web. They are simple to execute because many resource …

Vulnerability Analysis of Web Push Implementations in the Wild Page 1 Vulnerability Analysis
of Web Push Implementations in the Wild By Alberto Carboneri BS, Politecnico di Torino …

Web push is a novel technology, supported by all major browsers, which has gained
significant traction in the developer community thanks to its ability to engage users efficiently …