Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

×
Security

+ - Security a Concern as HTML5 Advances->

Submitted by Trailrunner7
Trailrunner7 (1100399) writes "Every technology innovation has its coming out party, and Google Inc.'s recent "dancing balls" logo experiment was widely interpreted as a high-impact debut for the next version of HTML, dubbed HTML5. But web security experts are warning that the sprawling new Web standard may favor functionality over security, enabling a new generation of powerful Web based attacks.

Web security experts agree that there are security enhancements in HTML5, but all expressed the same concern: that the new specification will greatly increase the "attack surface" of HTML — providing more avenues by which malicious code can be delivered through the Web.

"HTML5 has an enormous amount of functionality. The (specification) is just huge," said Jeremiah Grossman of Web security firm WhiteHat. The breadth of the new specification gives him concern. "I know that we're still finding vulnerabilities in HTML4," Grossman said."

Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Security a Concern as HTML5 Advances

Comments Filter:

All the evidence concerning the universe has not yet been collected, so there's still hope.

Working...