简体   繁体   English

在现代浏览器中是否可以使用安全的Java代码

[英]Is Secure Javascript Code Possible in Modern Browsers

Modern Javascript produces libraries such as OpenPG.js, Crypto-js, with other supporting server side technologies such as Dart and Node. 现代Javascript使用其他支持的服务器端技术(例如Dart和Node)生成诸如OpenPG.js,Crypto-js之类的库。 Is it now possible to deliver secure javascript client side? 现在可以提供安全的JavaScript客户端了吗?

No! 没有! You should never trust the browser since it cannot and will not protect your interests. 您永远不要信任浏览器,因为它不能也不会保护您的利益。 I highly recommend you to read following articles that explain the whys: 我强烈建议您阅读以下说明原因的文章:

https://tonyarcieri.com/whats-wrong-with-webcrypto http://blog.zuehlke.com/en/why-is-xss-apache-cordovas-worst-enemy/ https://tonyarcieri.com/whats-wrong-with-webcrypto http://blog.zuehlke.com/cn/why-is-xss-apache-cordovas-worst-enemy/

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

相关问题 有没有办法在现代浏览器中用javascript替换这个lodash _.chain代码? - Is there a way I can replace this lodash _.chain code with javascript in modern browsers? XSS在现代浏览器中仍然可能 - XSS still possible in modern browsers 在现代浏览器中,JavaScript 书签是否有任何安全限制? - In modern browsers, is there any security limitation for JavaScript bookmarklets? 使用Javascript优化现代浏览器(Chrome)的计时器 - Optimising timers for modern browsers (Chrome) in Javascript 在现代浏览器中是否仍可能发生基于DOM的XSS攻击? - Are DOM based XSS attacks still possible in modern browsers? 使JavaScript窗口在所有现代浏览器中居中,而无需额外的功能 - Center a JavaScript window in all modern browsers without extra functions 我可以在使用JavaScript的现代浏览器中使用或打开“插入”插入符号吗? - Can I use or turn on the 'insert' caret in modern browsers using javascript? 现代浏览器会阻止吗 - Do modern browsers block <a href="javascript:window.open…? 类似于“现代 HTML5”浏览器的 $(document).ready() Javascript - Javascript like $(document).ready() for “modern HTML5” browsers 现代浏览器中 Javascript Array.find() 的时间复杂度 - Time complexity of Javascript Array.find() in modern browsers
 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM