mikewest/securer-contexts

Issues

• Injection isn't transitive

  #1 opened 7 months ago by annevk
  2

• History and window.frames

  #2 opened 7 months ago by annevk
  4

• Isolation part is vague

  #3 opened 7 months ago by shhnjk
  7

• Threat model for isolating performance APIs

  #4 opened 7 months ago by yoavweiss
  3

• Insecure context might be able to gain timer from Securer context

  #6 opened 7 months ago by shhnjk
  5

• Unintended client storage information might leak inside a Securer context

  #7 opened 7 months ago by shhnjk
  4

• Thoughts on meaningful [SecureContext=Injection]

  #8 opened 7 months ago by shhnjk
  4