HTML 5 Security

Code Samples Download: Sample Code

Part 1: Same Origin Policy Basics

In this video we introduce HTML5 and the Same Origin Policy. If you are already familiar with the SOP, Session Cookies and Authentication you can skip this video and begin on part 2.

Part 2: postMessage Vulnerabilities

In this video we discuss and demonstrate vulnerabilities within insecure HTML5 postMessage implementations.

Part 3: CORS

In this video we introduce Cross Origin Resource Sharing (CORS) and discuss common implementation vulnerabilities.