Presentation: Tweet"Securing EcmaScript 5"
Until now, JavaScript has been one of the leakiest languages ever, and efforts to secure it have either been herculean (Caja, MSWebSandbox) or severely limiting (ADsafe, FBJS, Jacaranda). With the coming of EcmaScript 5, JavaScript has become an easily securable language, able to support safe mashups using the object-capability security model. Upcoming changes approved for EcmaScript Harmony, JavaScript becomes a flexible platform for expressing security policies. Throughout, we have pursued the premise that "Security is just extreme modularity". This talk will review the changes from EcmaScript 3 to 5 to Harmony, and explain how each contributes both to security and to better software engineering. We end with a brief overview of proposed Distributed Resilient Secure EcmaScript (Dr. SES).
Keywords: JavaScript, EcmaScript, robust, secure, standard, object-capabilities
Target audience: Programmers interested in using JavaScript, on either client or server, who want to understand how the new EcmaScript standard helps them write robustly composable code.
Download slides
Target audience: Programmers interested in using JavaScript, on either client or server, who want to understand how the new EcmaScript standard helps them write robustly composable code.
