Collected research

An Analysis of Browser Domain-Isolation Bugs and a Light-Weight Transparent Defense Mechanism

An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism

Shuo Chen, David Ross and Yi-Min Wang · Microsoft Research

Microsoft Research landing page for the CCS 2007 script-accenting paper. Carries the abstract only: browser domain isolation is too complex to audit exhaustively, so give each origin a random 'accent' key that scripts and HTML object names are XORed with, making cross-origin interference fail by construction.

Record

Document

An Analysis of Browser Domain-Isolation Bugs and A Light-Weight Transparent Defense Mechanism

Researcher

Shuo Chen, David Ross and Yi-Min Wang

Published by

Microsoft Research

Topic

Browser

In the archive

• Collected in the 2007 research round

Related sources

• ScriptAccenting Whitepaper

Tags

• same-origin-policy
• sop-bypass
• mitigation
• defence
• iframe
• dom
• javascript
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Shuo Chen, David Ross and Yi-Min Wang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.