Skip to content

Latest commit

 

History

History
38 lines (20 loc) · 2.32 KB

assignment-5.md

File metadata and controls

38 lines (20 loc) · 2.32 KB
Raw

Assignment 5, CS 495/595 Web Security, Spring 2022

Due: 2022-04-04

Points available: 15

For this assignment, you will need to set up two different node servers, running simultaneously on two different ports.

Relevant resources:

CORS: Blocking and reading responses from another origin (5 points)

  • Create node.js, HTML, and json files in the directory 5.1 that demonstrate Javascript running in one HTML file requesting a .json response from another origin. Show how the json response from one server is both blocked, and what is necessary to allow the response.

  • Keep your json response simple, but make it convey information about your three favorite things from assignment 2.

CORS: Blocking and reading HTTP response headers from another origin (5 points)

  • Create another directory 5.2; you can modify the files from 5.1 for this portion of the assignment if you'd like.

  • Demonstrate how three custom HTTP response headers (X-CS595s22-*, where * corresponds to your three favorite things from assignment 1) are both blocked and then allowed by one server.

Content-Security-Policy: embedding from another site (5 points)

  • Find a site from assignment 4 that allowed embedding. In directory 5.3, include the necessary files to demonstrate your local HTML file being allowed to embed the remote site as well as your local server prohibiting the embedding.

Extra credit (6 points)

  • Repeat the excercises in 5.1, 5.2, 5.3 but with one set of files served from GitHub Pages. Store any new files in 5.4.

Setting up directory "5"

All of the code, files, images, etc. necessary to complete this assignment will be in directory 5. The README.md for this assignment will have links to the pages, a short description of what each file does, screenshots of requests being blocked and allowed, as well as links to Youtube videos (one video for each of 5.1, 5.2, 5.3, and optionally 5.4) demonstrating the reading and blocking.