CorbFuzz: Checking Browser Security Policies with Fuzzing

Chaofan Shou, Ismet Burak Kadron, Qi Su +1

Browsers use security policies to block malicious behaviors. Cross-Origin Read Blocking (CORB) is a browser security policy for preventing side-channel attacks such as Spectre. We…