How does whitetrash protect a user against browser exploitation?
The ghost in the browser told us that practically all malware is served from a different domain. This makes sense from a malware distribution point of view and is unlikely to change. What this means is that even when legitimate websites have been compromised and are serving malware, the malware is being served from a different domain using an iframe or small javascript snippet. Because it is coming from a different domain, the malware domain will not be in the whitelist and hence the attack will be blocked by whitetrash.
