by Savio Rodrigues

Microsoft’s Web Sandbox open sourced

analysis
Jan 28, 20092 mins

Microsoft's open-source project aims to reduce the security risks around Web 2.0 and mashups

Port 25 is reporting that Microsoft has released Web Sandbox under the Apache License 2.0. This is the first I’ve seen of the Web Sandbox, but it seems like a great idea, especially the part about an open standard around the technology.

As Web 2.0 applications and mashups continue to include third-party content, the overall security of these applications comes into question.

The Web Sandbox Web site explains:

We want you to get involved. We created a cross-browser JavaScript virtualization layer that provides a secure standards-based programming model without requiring any add-ons. We are not done yet. We need your help: experiment with the Sandbox and make sure it works. We’ve included a set of samples so you can try to break the Sandbox. Our goal is to provide reusable components that will allow you to secure your Web 2.0 mashups. Our goal is to work together to standardize a secure web platform.

Web Sandbox not only provides enhanced application security across browsers, it also provides consistent W3C DOM support.

Go check it out and see if you can hack one of the samples!

P.S.: I should state: “The postings on this site are my own and don’t necessarily represent IBM’s positions, strategies, or opinions.”