LAB-07OPERATIONAL

Security Lab

Department of Trust Boundaries

Sandboxed and deliberately defanged. We study why the browser security model exists, where its boundaries actually sit, and never how to take somebody else's site apart.

TRUST BOUNDARY UNDER TEST

same-origin policyXSSCSRFCORSCSPcookies

origin A ─┐
origin B ─┼─ same-origin policy
origin C ─┘

LAB-07

Standing bench

Initialising benchEquipment warms up. Knowledge does not require it.

Experiments

securitySYSTEMS
Why did the browser block that fetch?
The network tab shows a 200. Your code sees an error. Both are correct, and the difference is the whole security model.
security11 min

Dossiers

Browser SecurityACTIVE
The Boundary That Holds the Web Together
The same-origin policy is the oldest load-bearing rule on the platform, and almost every security feature added since exists either to relax it safely or to patch a place where it leaked. This dossier traces what it protects, what it never protected, and why so much of modern web security is a negotiation around one boundary.
Field
Browser Security
Experiments
8
Observations
21

Standing bench

Experiments

Why did the browser block that fetch?

Dossiers

The Boundary That Holds the Web Together