Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Google's Browser Security Handbook is a brilliant resource for web application security, and in particular, for understanding how browsers behave. It discusses many issues, and contains tables showing behavior for a variety of browsers (MSIE6-8, FF2, FF3, Safari, Opera, Chrome, Android). The latter are especially useful, because they concisely show the variety and diversity of security-relevant behavior among popular browsers. If you are writing a web application, this helps you ensure that you have covered all likely behavior of all likely browsers.

However, the handbook hasn't been updated in a while. Also, its tables don't list some of the most modern browsers (they haven't been updated to reflect the most modern versions of many browsers).

Is there an updated resource that provides information comparable to the Browser Security Handbook, but contains more up-to-date information? Is there a place with a summary of behavior of browser behavior, across many browsers, for different kinds of security-relevant situations -- similar to the Browser Security Handbook has, but for more modern browsers?

share|improve this question
    
Ask @lcamtuf on Twitter. –  Vitaly Osipov Nov 22 '12 at 23:41
add comment

1 Answer

The Browser Security Handbook laid the foundation for his book: The Tangled Web which (as of Nov 2012) is the most current book form the same author. I purchased the book about a year ago and think it's a fantastic read.

As far as I know he hasn't released any newer or more updated information (appendix, etc) outside of his blog. But this entry as of 11/16 says he is working on a new book, though I haven't seen specifics yet.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.