Abstract

Web is driving the evolution of the current system, allowing users to find, share and combine information more easily and delivery of web pages built for the content of websites. HTML, JavaScript and CSS no restrictions on a web page that includes elements or even delegating complete control of a fully decoupled website. These design options have contributed to a number of vulnerabilities well studied and known safety, including cross-site scripting (XSS) and cross-site request forgery (CSRF or XSRF) [1], allowing an unauthorized and unrelated "third party" web page to retrieve information or perform actions on the "website first part" that the user has interacted willingly.