Skip to Main content Skip to Navigation
Conference papers

On the Integrity of Cross-Origin JavaScripts

Abstract : The same-origin policy is a fundamental part of the Web. Despite the restrictions imposed by the policy, embedding of third-party JavaScript code is allowed and commonly used. Nothing is guaranteed about the integrity of such code. To tackle this deficiency, solutions such as the subresource integrity standard have been recently introduced. Given this background, this paper presents the first empirical study on the temporal integrity of cross-origin JavaScript code. According to the empirical results based on a ten day polling period of over 35 thousand scripts collected from popular websites, (i) temporal integrity changes are relatively common; (ii) the adoption of the subresource integrity standard is still in its infancy; and (iii) it is possible to statistically predict whether a temporal integrity change is likely to occur. With these results and the accompanying discussion, the paper contributes to the ongoing attempts to better understand security and privacy in the current Web.
Document type :
Conference papers
Complete list of metadatas

Cited literature [37 references]  Display  Hide  Download

https://hal.inria.fr/hal-02023735
Contributor : Hal Ifip <>
Submitted on : Thursday, February 21, 2019 - 4:29:00 PM
Last modification on : Thursday, February 21, 2019 - 4:30:28 PM
Long-term archiving on: : Wednesday, May 22, 2019 - 4:33:00 PM

File

 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2021-01-01

Please log in to resquest access to the document

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Jukka Ruohonen, Joonas Salovaara, Ville Leppänen. On the Integrity of Cross-Origin JavaScripts. 33th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Sep 2018, Poznan, Poland. pp.385-398, ⟨10.1007/978-3-319-99828-2_27⟩. ⟨hal-02023735⟩

Share

Metrics

Record views

62