Re: IE8 security features

2008-07-10 Thread Kaushal Varshney
"Gervase Markham" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Robert O'Callahan wrote in mozilla.dev.planning: >> There are some posts in the IE blog about IE8 security features. >> http://blogs.msdn.com/ie/ >> Most of it is just try

Re: IE8 security features

2008-07-10 Thread Kaushal Varshney
"Gervase Markham" <[EMAIL PROTECTED]> wrote in message * news:<[EMAIL PROTECTED]>*> ... > Robert O'Callahan wrote in mozilla.dev.planning: > > There are some posts in the IE blog about IE8 security features. > > *http://blogs.msdn.com/ie/* <ht

Re: IE8 security features

2008-07-10 Thread Gervase Markham
Mike Ter Louw wrote: > In the MSDN blog comments, Giorgio Maone links to documentation for a > similar feature of NoScript: > > http://noscript.net/features#xss Well, this describes what it does, but not how it does it, so it's not very helpful by itself. Of course, as NoScript is free software,

Re: IE8 security features

2008-07-08 Thread Mike Ter Louw
Gervase Markham wrote: > Robert O'Callahan wrote in mozilla.dev.planning: >> 3) Some kind of dynamic anti-XSS filter that monitors browser traffic >> and blocks stuff. Not many details about that yet. > > This latter is an interesting idea, but it sounds to me like a recipe > for hard-to-understan

Re: IE8 security features

2008-07-08 Thread Gervase Markham
Robert O'Callahan wrote in mozilla.dev.planning: > There are some posts in the IE blog about IE8 security features. > http://blogs.msdn.com/ie/ > Most of it is just trying to catch up to Firefox 3. Three things that > we might want to look at, though: > 1) A window.toStat