Mozilla last week revised its position on a web security technology called Trusted Types, which it has decided to implement in its Firefox browser.
By so doing, the browser biz will help reduce a longstanding form of web attack that relies on injected code.
“We at Mozilla have done a thorough spec review and intend to change our standards position to positive,” declared Frederik Braun, Firefox security engineer, in a post to a discussion of Mozilla’s views about proposed browser technologies. “We are convinced of the track record that Trusted Types has in terms of preventing DOM-based XSS on popular websites.”
