Information Flow Control on the Web with Racets

Abstract

Faceted execution is a technique for dynamic information flow control that allows programmers to program in a policy-agnostic manner. Racets uses macros to extend Racket with support for faceted execution. We present the beginnings of a web framework built in Racets that links client-side button presses to declassification of faceted values in a way that makes it easy for programmers to understand how private data flows in their applications.