Client-Side Security Using CORS

Abstract

Nowadays client-side security is an important issue, as everyone uses his computer to access different websites such as news, social network, banking, etc. It’s a common scenario, while surfing the internet trying to access a bank account or using social network or purchasing online. So it's necessary and an important issue that, to keep sensitive information such as cookies and passwords protected against any malicious malware or prevented against any kind of typical attacks such as CSRF or XSS. There are different mechanisms of preventing this type of attack among them CORS is the well-known and recent mechanism. In this thesis, we investigated CORS (Cross-Origin Resource Sharing) as a mechanism for preventing unauthorized users from accessing sensitive information or leak it. To test the effectiveness of our approach we have done an experiment and the experiment shows good and promising results.