Browser Security From Google
The Browser Security Handbook (BSH) from search engine company Google has been published under free license.
Aimed at web developers, browser engineers and security researchers, the BSH gives a basic insight into HTML, HTTP, Javascript and the construction of URL's. In addition, it explains web browser security features, for example, how they handle cookies and deals with websites that use components from different servers.
The handbook takes an in-depth look at the individual features of Internet Explorer 6 and 7, Opera, Apple Safari as well as Google's own Chrome. Versions 2.0.0.18 and 3.0.3 and Google's Linux-based browser, mobile SDK Android, also come under scrutiny.
Responsible for the project is Google's Michael Zalewski, who also worked on Chrome, Ratproxy and numerous other web security tools. On the BSH, he had the help of nine other developers.
The Handbook presently exists as Wiki entries on a Google project page and is licensed under the very liberal Creative Commons License that allows the distribution and modification, provided the original author is mentioned.
A complimentary tarball with browser test cases under the Apache License 2.0 is also available.
Issue 203/2017
Buy this issue as a PDF
News
-
Linus Torvalds Invites Attackers to Join the Kernel Community
He wants attackers to join the community instead of attacking the code.
-
Oracle Donating Java EE to the Eclipse Foundation
Oracle is recommending a new name for the Java Enterprise Edition platform.
-
Reddit Closing Doors to Open Source
The peanut gallery of the Internet is closing its open source repository.
-
Largest Open Source Summit to Date Around the Corner
LinuxCon is now Open Source Summit.
-
Gnome is Celebrating it’s 20th Birthday
More than 33 releases since the first release of Gnome.
-
SQL Server Comes to RHEL; OpenShift Comes to Azure
Microsoft and Red Hat expand their partnership.
-
LibreOffice 5.4 Released
Comes with improved support for Microsoft Office file formats.
-
Red Hat to Drop Support for Btrfs
The company is building their own storage solution called Stratis.
-
Reinvent your network with DevOps tools and techniques:
Opportunities and Risks: Containers for DevOps
Automated Builds Using CentOS 7 and Kickstart
Elasticsearch, Logstash, and Kibana – The ELK stack
Are you ready for DevOps? Try your luck with the beta version of Linux Professional Institute's new DevOps exam.
-
Kolab Now Integrates Collabora Online
Kolab Now subscribers now have access to Collabora Online.