From 62f30968a641ef6eb7f8cceadae232cea4ad7b4a Mon Sep 17 00:00:00 2001 From: Dominic Chen Date: Mon, 11 Jul 2016 21:34:03 -0700 Subject: Provide overview of security model (#717) This commit introduces a discussion of WebAssembly's security model for both users and developers, though primarily targeted at latter. Resolves #205. --- Web.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'Web.md') diff --git a/Web.md b/Web.md index 9b4f34c..c6d1d51 100644 --- a/Web.md +++ b/Web.md @@ -58,10 +58,10 @@ rule is only mandatory for Web embedding. ## Security -WebAssembly's security model should depend on [CORS][] and -[subresource integrity][] to enable distribution, especially through content -distribution networks and to implement -[dynamic linking](DynamicLinking.md). +WebAssembly's [security](Security.md) model should depend on the +[same-origin policy][], with [cross-origin resource sharing (CORS)][] and +[subresource integrity][] to enable distribution through content +distribution networks and to implement [dynamic linking](DynamicLinking.md). ## SIMD @@ -75,6 +75,7 @@ Once [SIMD is supported](PostMVP.md#fixed-width-simd) WebAssembly would: Once [GC is supported](GC.md), WebAssembly code would be able to reference and access JavaScript, DOM, and general WebIDL-defined objects. - [CORS]: https://www.w3.org/TR/cors/ + [same-origin policy]: https://www.w3.org/Security/wiki/Same_Origin_Policy + [cross-origin resource sharing (CORS)]: https://www.w3.org/TR/cors/ [subresource integrity]: https://www.w3.org/TR/SRI/ [SIMD.js-in-asm.js]: http://discourse.specifiction.org/t/request-for-comments-simd-js-in-asm-js -- cgit v1.2.3