Browser security briefing: Google and Mozilla lay the groundwork for a ‘post-XSS world’

Minimizing the potency of classic attack vectors such as cross-site scripting (XSS) and cross-site request forgery (CSRF) promises to herald what some are calling the ‘post-XSS world’.