Html5 security issues and its existance

1. n|u
HTML 5

2. n|u
Structure
Session 1
Introduction
HTML 5 Basics
Session 2
What’s inn for me ….Developer ?
Session 3
What’s inn for me …. Ethical Hacker ?
Session 4
What’s inn for me …. Code reviewer/ Webtesting ?

3. n|u
 New Standard for HTML
 work in progress..
 Supported Browsers

4. n|u

5. n|u
Objective
 New Feature - HTML, CSS, DOM, and JavaScript
 Error handling
 Markup vs Scripting
 Independence
How it all Started?
W3C & WHATWG(WebHypertext Application Technology Working Group )

6. n|u

7. n|u
http://www.youtube.com/watch?v=mzPxo7Y6JyA

8. n|uDeveloper Point of view

9. n|uHTML5 - New Features
 Drag and Drop
 <canvas> vs SVG
 HTML5 Geolocation
 Webforms 2.0
 local storage & session storage
 HTML5 Cache
 Web sockets
 Webworkers
 Server Sent events

10. n|u
What is SVG?
Vector based graphics
 Resolution independence
 W3C recommendation
 Dom Based
What is Canvas?
 Speed
 Text rendering capabilities
 Graphics quality – Max and Min
 Animation and accessibility support
Graphics

11. n|u
Core methods
 openDatabase
 transaction
 executeSql
Operations
 Read
 Insert
Web SQL

12. n|u
Types
 Session
 local
Operations
 CPU Utilization
 Threads
 Terminate
 Import scripts
Web Storage
Web Workers

13. n|uWhat’s in for Ethical
Hacker

14. n|uAttack vectors

15. n|u
 XHR and Tags
CSRF, Click jacking, XSS
 Thick Features
Exploiting browser SQL ports,
SQLi with web workers and messaging
 DOM
Dom based XSS
Protocol attacks
Attack vectors

16. n|uSame origin policy
access of one window to another
same protocol://domain:port
multiple subdomains
Bypass methods
Document.domain property
Cross-Origin Resource Sharing
Cross-document messaging

17. n|u
• API
• Site a.com - Site b.com Text only
Access-Control-Allow-Origin: http://hello-world.example
• XMLHttpRequest - Site a.com to b.com
var client = new XMLHttpRequest() client.open("GET",
"http://www.a.com/hello") client.onreadystatechange = function() { /* do
something */ } client.send()
CORS
• HTTP Request
Access-Control-Request-Method (preflight)
Access-Control-Request-Headers (preflight)
• HTTP Response
Access-Control-Allow-Origin
Access-Control-Allow-Credentials
Access-Control-Allow-Expose-Headers
Access-Control-Allow-Max-Age (preflight)
Access-Control-Allow-Allow-Methods (preflight)
Access-Control-Allow-Allow-Headers (preflight)

18. n|u

19. n|u
• API
• Requests directly to a web server and load the server response data
directly back into the script
• XMLHttpRequest - Site a.com to b.com
var client = new XMLHttpRequest() client.open("GET",
"http://www.a.com/hello") client.onreadystatechange = function() { /* do
something */ } client.send()
XHR

20. n|uSand Box
• Sandbox is a security mechanism for separating running programs
• Execute un verified code
• Untrusted users and untrusted websites
• Thirdparty scripts
• Code Snippet
<iframe sandbox="allow-same-origin allow-scripts allow-popups allow-forms"
src="https://platform.twitter.com/widgets/tweet_button.html"
style="border: 0; width:130px; height:20px;"></iframe>

21. n|u

22. n|u

23. n|uWhat’s in for Security Tester

24. n|u

25. n|u

26. n|u

27. n|u

28. n|u

29. n|u