Mozilla Aims At Cross-Site Scripting With Firefox 3

Web 2.0 has enabled a broad array of Websites to be more engaging for users. It has also enabled a new and now very common attack, namely cross site scripting, commonly referred to as XSS attacks (define).

Mozilla is aiming to put an end to XSS attacks in its upcoming Firefox 3 browser. The Alpha 7 development release includes support for a new W3C working draft specification that is intended is secure XML over HTTP requests (often referred to as XHR) which are often the culprit when it comes to XSS attacks. XHR is the backbone of Web 2.0 enabling a more dynamic web experience with remote data.

“Cross site XMLHttpRequest will enable web authors to more easily and safely create Web mashups,” Mike Schroepfer, Mozilla’s vice president of engineering, told internetnews.com.