Windows 10: Microsoft is retiring XSS Filter in Edge browser with Redstone 5

Microsoft is currently working on Windows 10 Redstone 5 update and it comes with a slew of improvements for native apps like Edge browser. With Windows 10 Redstone 5, the company is adding new features, Fluent Design and security-focused improvements to Edge browser.

In 2008 Microsoft introduced a cross-site Scripting protection technology called XSS Filter for Internet Explorer and it was later adopted by Chrome and other browsers. XSS protection is widely used by the website owners and it’s a great technology to protect the customers.

A report last week revealed that the latest builds of Microsoft Edge browser dropped the feature. Yesterday in a blog post, Microsoft confirmed that the company is retiring the XSS filter in Edge browser with Windows 10 Redstone 5 but the customers will remain protected due to the implementation of modern standards like Content Security Policy.

“We are retiring the XSS filter in Microsoft Edge beginning in today’s build. Our customers remain protected thanks to modern standards like Content Security Policy, which provide more powerful, performant, and secure mechanisms to protect against content injection attacks, with high compatibility across modern browsers,” Microsoft said.

A bit disappointing that they mention CSP as a reason for the deprecation given the incredibly low adoption rate…

— Scott Helme (@Scott_Helme) July 26, 2018
​

Content Security Policy (CSP) would easily mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks but according to Scott Helme, a security researcher, the CSP protection technology hasn’t been widely used yet.

“Anything to push CSP is great but it feels like they want to kill the auditor for some reason and this was an excuse to cover them,” Scott explains in a follow up tweet.

The post Microsoft is retiring XSS Filter in Edge browser with Redstone 5 appeared first on Windows Latest

Weiterlesen...

 

Microsoft is developing a built-in ad blocker for its Edge browser

"One of the first browser add-ons many people install to improve their online experience is Adblock Plus or something similar. Until recently, Microsoft Edge's lack of support for add-ons put off a lot of would-be users, but reports from Build 2016 suggest that native ad blocking is on its way to the Internet Explorer successor.

Adblock Plus is coming to Edge, but built-in ad blocking would negate the need for such an add-on. A slide shown off and snapped at a Build presentation shows that the next version of Edge, in response to user feedback, will feature ad blocking capabilities. There's no word on delivery timescale, but the upcoming Windows 10 Anniversary Update would seem a likely candidate.

ZDNet's Ed Bott photographed the slide which shows Microsoft's development roadmap built around feedback from testers. Right at the top of the list is reference to plans to create a plugin and extension store for Edge, but it's entry number four that's more intriguing.

"Build ad blocking features into the browser" is listed as a Feature Request from users. But the good news is that it is not only listed as being "Deliverable 4682811", but as "Targeted for the next version".

This will no doubt come as good news for those who have fallen in love with Edge, but it's not something that will be welcomed by the likes of Adblock Plus. It does seem that, particularly in the mobile arena, there is a move to baking ad blocking into the browser so it makes sense that Microsoft is following the trend. But it is the fact that Edge straddles Windows 10 on the desktop and Windows 10 Mobile that makes this a particularly interesting move.

Keep an eye out for Insider builds in the coming weeks as the feature may be just around the corner."

Forget extensions, built-in ad blocking is coming to Microsoft Edge - [UPDATE... no it's not!]

 

Microsoft Edge..

Hi,

Thank you for contacting Microsoft community.

I suggest you to follow the below steps if you are using Microsoft edge in MSN home page for changing your current location and check if it helps.

• Open edge browser login to msn.com.
• Then on the right hand side, click on gear icon.
• Go to settings, then under “market and language” and “home location” option change your current location and check whether it shows correct.

If you are using bing.com through edge browser then I suggest you to follow the below steps and check.

• Open edge browser login to bing.com.
• Then on the right hand side, click on gear icon.
• Go to “region” option and click on “change your region” link.
• Then select your country it will take your location.

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

 

microsoft edge

Hi Navid,

Thanks for posting your query on Microsoft Community.

I would suggest you to try restarting Microsoft Edge Browser and check if it helps.

Follow the below steps:

• 
  Open task manager right click on Microsoft Edge and go to details click on microsoftedgeCP.exe and click end task
  
• 
  Restart your Computer and check if it helps.
  

Hope it helps, reply to us with the status of your issue. We will be happy to assist you.