diff --git a/epub33/core/index.html b/epub33/core/index.html index 88fcaf17f..35aeb9cd8 100644 --- a/epub33/core/index.html +++ b/epub33/core/index.html @@ -8818,6 +8818,13 @@

Threat Model

Checking for malware and exploits at distribution time is not always reliable, either, as the malicious content can be swapped in any time after publication, unlike resources that come embedded in the EPUB Container.

+

The origin of an EPUB is both unknown to the EPUB Creator and + specific to each Reading System implementation. Consequently, if the EPUB Creator hosts remote + resources on a web server they control, the server effectively cannot use security features that + require specifying allowable origins, such as headers for + CORS, + Content-Security-Policy, + or X-Frame-Options.

Linking to external resources
diff --git a/epub33/rs/index.html b/epub33/rs/index.html index 5ee5a3465..88dcd9e1c 100644 --- a/epub33/rs/index.html +++ b/epub33/rs/index.html @@ -2156,6 +2156,13 @@

Threat Model

Calls to remote resources can also be used to track information about users (e.g., through server logs). Reading Systems should limit the information they expose through HTTP requests to only what is essential to obtain the resource.

+

The origin of an EPUB is both unknown to the EPUB Creator and + specific to each Reading System implementation. Consequently, if the EPUB Creator hosts remote + resources on a web server they control, the server effectively cannot use security features that + require specifying allowable origins, such as headers for + CORS, + Content-Security-Policy, + or X-Frame-Options.

External links