
By Open Web Developer News Desk | Article Rating: |
|
January 2, 2009 05:45 AM EST | Reads: |
23,292 |
Google recently released its Browser Security Handbook to the general public. The 60-page document provides a comprehensive comparison of a broad set of security features and characteristics in commonly used browsers, along with commentary and implementation tips for application developers who need to rely on these mechanisms, as well as engineering teams working on future browser-side security enhancements.
The Browser Security Handbook, Google hopes, will help make the Web a safer place.alewski, of the company's Security team, comments:
"Many people view the task of writing secure web applications as a very complex challenge - in part because of the inherent shortcomings of technologies such as HTTP, HTML, or Javascript, and in part because of the subtle differences and unexpected interactions between various browser security mechanisms.
Through the years, we found that having a full understanding of browser-specific quirks is critical to making sound security design decisions in modern Web 2.0 applications. For example, the same user-supplied link may appear to one browser as a harmless relative address, while another could interpret it as a potentially malicious Javascript payload. In another case, an application may rely on a particular HTTP request that is impossible to spoof from within the browser in order to defend the security of its users. However, an attacker might easily subvert the safeguard by crafting the same request from within commonly installed browser extensions. If not accounted for, these differences can lead to trouble."
Published January 2, 2009 Reads 23,292
Copyright © 2009 SYS-CON Media, Inc. — All Rights Reserved.
Syndicated stories and blog feeds, all rights reserved by the author.
More Stories By Open Web Developer News Desk
SYS-CON's Open Web News Desk tracks the constant stream of compelling technology and Open APIs being released by or catalyzed by Google and its allies.
![]() Feb. 20, 2019 10:30 AM EST |
By Pat Romanski Feb. 20, 2019 08:00 AM EST |
By Zakia Bouachraoui Feb. 20, 2019 05:00 AM EST |
By Yeshim Deniz Feb. 20, 2019 04:15 AM EST |
By Zakia Bouachraoui ![]() Feb. 19, 2019 04:15 PM EST |
By Yeshim Deniz ![]() Feb. 18, 2019 07:45 AM EST |
By Zakia Bouachraoui Feb. 17, 2019 05:00 PM EST |
By Elizabeth White ![]() Feb. 16, 2019 04:45 PM EST Reads: 14,062 |
By Roger Strukhoff Feb. 14, 2019 05:00 PM EST |
By Elizabeth White Feb. 13, 2019 08:15 PM EST |