JavaScript continues to find adherents. Some of them are not dedicated to better IT practices. JavaScript adherents over the years have come to include nefarious hackers and other vandals, and, as a result, the JavaScript security model has had to evolve in order to better protect programs that run businesses.
The browser-as-ubiquitous client has its good and bad aspects, and many of them have an impact on use of JavaScript. The popular scripting language is a ready means to spawn functions and add useful capabilities. But this same language can be used to eat up memory. Worse, this can lead to crashes of either or both the browser and operating system.
In this chapter from JavaScript: The Complete Reference, Second Edition, by Thomas Powell and Fritz Schneider, you will learn about:
Data validation
Cross site scripting vulnerabilities
Sandbox approaches that restrict script execution environments
The signed script policy
Different behaviors of different browsers
Intranet versus Internet browser security strategies
Click here to download this free book chapter.
