full-disclosure - Declarative Security - Browser Addons (Firefox)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 24 Jul 2011 22:40:16 -0400
From: SecNiche Security Labs <0kn0ck@...niche.org>
To: full-disclosure@...ts.grok.org.uk
Cc: websecurity@...appsec.org
Subject: Declarative Security - Browser Addons (Firefox)

Hi All

HTTP response headers (declarative security - X-Frame-Options,
X-Content-Security-Policy etc) force the browser to implement inbuilt
security mechanism against related web attacks. We have released Firefox
addons that finger prints the presence of declarative security headers
in every page which is visited by the user. Precisely, a information
gathering addons.

Project Page : http://www.secniche.org/declsec/

Aditya K Sood
SecNiche Security Labs
http://www.secniche.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/