Content Security Policy is a standard developed by Mozilla designed to protect against cross site scripting (XSS) attacks. Cross site scripting attacks use vulnerabilities in websites to inject JavaScript code into pages or urls of that site. The injected JavaScript code is then executed when visitors open a specifically prepared link or page on the [...]

Categories: Firefox, Security, Twitter

Ghacks regulars know that I’m a big supporter of the free cloud based password manager LastPass. The program is available for popular web browsers and mobile devices, and offers many comfortable password and login related features. This includes online password management, one-click log ins, user profiles to fill out forms faster, a secure password generator [...]

Categories: Security, The Web

Secure Login is a Firefox extension that is similar to Opera’s Wand feature. Instead of logging into a website by filling out the username and password form you login by clicking a button or using a shortcut. This is a great way to prevent the execution of malicious Javascript code that could “phish” your data.

Javascript will be temporarily disabled during login and the data is send right to the website that you want to login to. The Domain that you are currently on and that you want to login to are compared to ensure that you are indeed at the right website. A mismatch would result in a popup warning.

Categories: Browsing, Firefox, Security

Cross site scripting (also known as XSS) occurs when a web application gathers malicious data from a user. The data is usually gathered in the form of a hyperlink which contains malicious content within it. The user will most likely click on this link from another website, instant message, or simply just reading a web board or email message.

Categories: Browsing, Security