search

florentulve / owasp-esapi-js

Automatically exported from code.google.com/p/owasp-esapi-js
Other
0 stars 0 forks source link

Security Controls for HTML5 Drag and Drop Events #1

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
Implement a security control for ensuring that only intended documents have
access to the DataTransferObject during a drag operation by providing a
wrapped implementation. For information see the following link.

http://www.w3.org/TR/html5/editing.html#security-risks-in-the-drag-and-drop-mode
l

In comments, discuss possible mitigation of MiTM and XSS risks associated
with the new HTML Drag and Drop functionality.

Original issue reported on code.google.com by chrisisbeef on 29 Apr 2010 at 2:36