Attack the Glass (ATG)

Attack the Glass: Technical Whitepaper

v2.4.7 · 16 chapters in 5 partsabout five hours

Attack the Glass (ATG) is a type of supply chain injection vulnerability that targets client-side rendering. This whitepaper sets out the architecture that produces it, the surface it covers, the mechanism by which it is exploited, the confirmed historical record, and the limits of existing defenses.

  1. Executive Summary

Part I - The Vulnerability and the Adversary

  1. 1Client-Side Rendering (CSR)
  2. 2The ATG Vulnerability Architecture
  3. 3The Adversary: Capability and Operations

Part II - The Surface Landscape

  1. 4Languages and Runtimes
  2. 5The Platform Landscape
  3. 6The Provider Landscape
  4. 7Content Delivery Networks
  5. 8Third-Party Script Loading: The Direct Trust Problem
  6. 9Open-Source and the Path to the Client Runtime
  7. 10AI in the Client Runtime

Part III - The Attack Mechanism

  1. 11Placement and Access (P&A)
  2. 12Ownership Opacity: The Visibility Problem

Part IV - Evidence and Existing Defenses

  1. 13The Confirmed Historical Record: Summary Reference
  2. 14Existing Defenses: Partial Measures and Structural Limits
  3. 15Relationship to Existing Frameworks

Part V - Reference Methodology

  1. 16Severity Methodology and Reference Matrix Guide
  2. Closing