Skip to Content
Web Technology: Theory and Practice
book

Web Technology: Theory and Practice

by M. Srinivasan
June 2012
Intermediate to advanced
386 pages
10h 7m
English
Pearson India
Content preview from Web Technology: Theory and Practice
4.20 JAVASCRIPT SECURITY

A web browser is a complex piece of software, and JavaScript is a powerful scripting language. It is no surprise that the intersection between these elements will be far too complex. On the flip side, it offers potential security holes. However, there are certain precautions that the language itself tries to provide.

The window object allows a lot of control to the JavaScript programmer.

4.20.1 File Handling and Execution

JavaScript cannot read files from the file server (except for cookies). Similarly, it cannot write any file into the file system (except through server-side programs). Likewise, it cannot execute any program in the file system.

4.20.2 Same Origin Policy

This security policy applies to client-side scripting ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Technical Java™: Developing Scientific and Engineering Applications

Technical Java™: Developing Scientific and Engineering Applications

Grant Palmer
Practical Web Technologies

Practical Web Technologies

P. K. Yuen, V. Lau
How to Develop a Great Digital Strategy

How to Develop a Great Digital Strategy

Jeanne W. Ross, Cynthia M. Beath, Ina M. Sebastian

Publisher Resources

ISBN: 9789332508194