3
votes
Accepted
Can I use a ServiceWorker to prevent an XSS attacker from gaining access to private user data?
No, of course not. You cannot use service workers to prevent some javascript code from making HTTP requests. The malicious code could simply deregister your service worker.
Or it could register its ...
- 1,268
2
votes
Accepted
Does enabling SharedArrayBuffers via service worker headers create Spectre vulnerability?
To be clear, SharedArrayBuffer is an issue because it can be used as part of Spectre/Meltdown side-channel attack exploits against the client. JavaScript running in a webpage that has access to this ...
- 136k
1
vote
What measures can be taken to make a site safe again after a hostile service worker is installed in users' browsers?
From your link:
Installation is attempted when the downloaded file is found to be new
— either different to an existing service worker (byte-wise compared),
or the first service worker ...
- 13.1k
Only top scored, non community-wiki answers of a minimum length are eligible