Welcome to WebmasterWorld Guest from

Forum Moderators: incrediBILL

Message Too Old, No Replies

New Browser Security Handbook from Google Code

5:52 am on Dec 12, 2008 (gmt 0)

Senior Member

WebmasterWorld Senior Member tedster is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:May 26, 2000
votes: 0

Here's a new release from Google Code that I'm really getting into - the online Browser Security Handbook.

This document is meant to provide web application developers, browser engineers, and information security researchers with a one-stop reference to key security properties of contemporary web browsers. Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities.

Although all browsers implement roughly the same set of baseline features, there is relatively little standardization - or conformance to standards - when it comes to many of the less apparent implementation details. Furthermore, vendors routinely introduce proprietary tweaks or improvements that may interfere with existing features in non-obvious ways, and seldom provide a detailed discussion of potential problems.


There are three main sections to the online handbook:
Part 1: Basic concepts behind web browsers
Part 2: Standard browser security features
Part 3: Experimental and legacy security mechanisms

I've never worked on developing a browser, but this is valuable information for me, too, as it clears up a lot of my "black box" thinking.

6:24 am on Dec 12, 2008 (gmt 0)

Senior Member

joined:July 29, 2007
votes: 100

Excellent reading material, thanks tedster.

Reading information like this makes me feel like my friends when they set their browser to disable third party cookies for the first time and they start seeing dozens of cookie requests as they browse. They had no idea how much gets placed on their computer much like I'm about to be saying "I had no idea" while reading that.

7:14 am on Dec 12, 2008 (gmt 0)

Senior Member from MY 

WebmasterWorld Senior Member vincevincevince is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Apr 1, 2003
votes: 0

Very interesting. I am going to copy & paste some of those tables into a fast-reference sheet.