Posted by David Dworken, Information Security Engineer, Google Security Team

Many web applications need to display user-controlled content. This can be as simple as serving user-uploaded images (e.g. profile photos), or as complex as rendering user-controlled HTML (e.g. a web development tutorial). This has always been difficult to do securely, so we’ve worked to find easy, but secure solutions that can be applied to most types of web applications.

Classical Solutions for Isolating Untrusted Content

The classic solution for securely …

applications data development display domains engineer find google google security hosting html images information information security photos profile sandbox security security engineer security team simple solution solutions team tutorial types untrusted user data web web applications web development