Google's DOM Snitch helps flag web app vulns
Google has released an experimental extension for its Chrome browser that developers can use to scan their Web applications and flag code that could make them vulnerable to malware attacks.
The free tool, called DOM Snitch, is designed to sniff out potential security holes in Web applications' client-side code that could be exploited by attacks such as client-side scripting, Google said on Tuesday.
"To do this, we have adopted several approaches to intercepting JavaScript calls to key and potentially dangerous browser infrastructure such as document.write or HTMLElement.innerHTML," Google official Radoslav Vasilev wrote in a blog post. In addition to developers, DOM Snitch is also aimed at code testers and security researchers, the company said.
