Securing the Application

In the previous chapter, we saw how a set of techniques can be used to prevent micro frontends from leaking styles. While styling is certainly one aspect that needs to be considered to have separately created micro frontends all running in one application, the scripts and overall logic also need to be considered. Unlike CSS, there is no direct solution to the problem of missing script isolation.

In this chapter, we’ll introduce the various security aspects that come into play when combining applications from multiple sources under a single runtime. Problems can be partially reduced by delegates and runtime isolation. However, in many cases, such techniques cannot be applied – at least for all relevant micro frontends.

One aspect that we want to investigate in this chapter is how micro frontends can be written more securely using web standards. In this area, we’ll explore what can be done to limit the access from and to scripts originating...