Browser Security From Google
The Browser Security Handbook (BSH) from search engine company Google has been published under free license.
Aimed at web developers, browser engineers and security researchers, the BSH gives a basic insight into HTML, HTTP, Javascript and the construction of URL's. In addition, it explains web browser security features, for example, how they handle cookies and deals with websites that use components from different servers.
The handbook takes an in-depth look at the individual features of Internet Explorer 6 and 7, Opera, Apple Safari as well as Google's own Chrome. Versions 2.0.0.18 and 3.0.3 and Google's Linux-based browser, mobile SDK Android, also come under scrutiny.
Responsible for the project is Google's Michael Zalewski, who also worked on Chrome, Ratproxy and numerous other web security tools. On the BSH, he had the help of nine other developers.
The Handbook presently exists as Wiki entries on a Google project page and is licensed under the very liberal Creative Commons License that allows the distribution and modification, provided the original author is mentioned.
A complimentary tarball with browser test cases under the Apache License 2.0 is also available.
Issue 158/2014
Buy this issue as a PDF
Digital Issue: Price $9.99
(incl. VAT)
Tag Cloud
News
-
New Mint Minted
Version 16 of the popular Linux desktop reveals new tools, edge-snapping, and performance improvements.
-
New Worm Attacks Linux Devices
Symantec says Linux-Darlioz burrows in through PHP.
-
Project Sputnik Gets a Boost
Dell renews its quest for the ultimate developer machine.
-
Sneaky New Linux Attack Discovered in the Wild
Innovative back door looks like normal SSH traffic.
-
CeBIT Call for Papers
One of CeBITs most successful forums opens the new year with a new name. The popular Open Source Forum continues in 2014 under the name Special Conference: Open Source. This year, the forum will be bigger and offer a wider range of possibilities for sponsors.
-
Linus Announces Linux Kernel 3.12
New release offers better graphics drivers and expands filesystem support.
-
Dark Alliance Reinvents Email Security
New mail protocol will shut out the NSA and prevent snooping on metadata.
-
DDos Attack Map Charts Denial of Service
A new web application helps users visualize distributed denial-of-service attacks.
-
Saucy Salamander Gets Legs
Ubuntu 13.10 takes a step toward convergence, with lots of mobility, but Mir only partly here.
-
Intel and Arduino Create Pi-Like System
Galileo board is targeted to embedded developers and educational institutions.