Edgeguard: Client-side DOM Security - detecting malice - An Open Framework
summary
Open-source 6KB JavaScript library that inserts via an include and uses the MutationObserver API to detect DOM mutations (new elements, modified attributes, timers), fingerprints known scripts, and flags concrete exfiltration patterns: image src requests carrying cookies, fake form actions that POST credentials off-site, XHR posts of full DOM. Alerts send over CORS/JSONP to an AWS logger or SIEM as a cross-domain alert; it does not block by default and offers whitelists and fallbacks for older browsers as a Zero-footprint library.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 2:33Understanding DOM security
- 5:09Security threats and risks
- 7:52Limitations of traditional security
- 11:02Introducing EdgeGuard
- 13:35Operational workflow
- 18:59Demonstrations and use cases
- 31:23Logging and configuration
- 34:03Conclusion and closing thoughts
related talks
40mHostile JavaScript: Attacking and Defending the Browser
42mDon't trust the DOM: Bypassing XSS mitigations via script gadgets
01h 01mClient-Side Protection Against DOM-Based XSS Done Right (tm)
23mJavaScript attack surface
59mThe Final Frontier: Security APIs in Modern Browsers
33mHacking The Front-End
40mClient-Side Protection Against DOM-Base...
47mDOM Jungle - Can We Trust The UI?