Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Internet Explorer has a security feature called "Zone Elevation Protection", in which sites outside a list of trusted sites (which can be configured) are not allowed to navigate to the ones on the list.

Is there anything similar to that on Google Chrome? I know a similar protection does exist for treating local files, but can I do something like that for a list of trusted sites? (Even being that a list of SSL-trusted sites?)

share|improve this question

1 Answer 1

up vote 3 down vote accepted

The zone concept first appeared in Internet Explorer 4 (1997). It got prommoted to more prominent status in Internet Explorer 5. It was microsoft's attempt to model the web in discrete steps of trustworthyness/danger. Most other browsers use the white-list(trusted) and black-list(dangerous) method instead of zones.

What Internet explorer is doing is protecting it's zone concept by preventing a dangerous site from redirecting to a trusted site and doing some cross site scripting (XSS) when IE things it is at a trusted site. Really a IE specific XSS defense.

Google Chrome Preferences in the "Under the Hood" tab the "Content Settings..." allows you to set exceptions (white-lists) to the content restriction rules. This is a more fine grained level of control because you can set exceptions on a per site basis rather than for every site defined to be in a particular zone.

share|improve this answer
    
Indeed. I wish Google would put more effort into a good UI for whitelisting javascript, plug-ins, etc. –  Alex Holst Aug 5 '11 at 13:42

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.