SMash: Secure Cross-Domain Mashups on Unmodified Browsers

Mashups mix and merge content (data and code) from multiple content providers in a user’s browser, to provide high-value web applications that can rival the user experience provided by desktop applications. The existing browser security model was not designed for supporting such applications, and therefore they are typically implemented in an insecure manner. In this paper, we present a secure component model, where components are provided by different trust domains, and can interact using a communication abstraction that allows ease of specification of security policy. We have developed an implementation of this model that works for all major current browsers, and addresses challenges of communication integrity and component phishing. To the best of our knowledge, this is the first work that achieves the goal of secure mashups without any modifications to current browsers, and hence has the potential to achieve immediate and widespread adoption.