JavaScript Security

• No formal security model
• Access to disk, network limited by non-availability of such JavaScript functions
• Security is dependant on correct implementation of browsers
• Previous bugs included
  • Read user's history
  • Read user's URL cache
  • Forge email
  • Recursively list local disks

---

Slide 25

©Copyright 1997

Jan Newmarch