new icn messageflickr-free-ic3d pan white
Facebook Code | by Terriko
Back to photostream

Facebook Code

... Especially when you compare it to the actual code for facebook. This is some of the code used to generate the page I showed you (you can see my name in there). It's complex JavaScript, and it can be surprisingly difficult to figure out where a box should begin and end in all that mess. And that's not a critique of Facebook specifically: many web sites are generated from a variety of server and client-side systems. Writing policy for generated HTML can be very complex, and that could be one of the reasons so few web developers have embraced security policy.


Note: This is part of my presentation on Visual Security Policy for the Web.

0 faves
Uploaded on August 23, 2010