Websites that interactively test browser security (XSS, CSRF, Javascript, etc)

Question

I'm looking for a comprehensive list of browser test sites so that I can visually prove that the browser is patched and configured for safe web browsing. My intent is to know what risks may exist prior to using the browser. (as I may be using a Beta or a mobile version of a mainstream browser and want to verify)

The most recent sites (relating to security) I've come across include

• X-Frame-Options (info)
• Mozilla's Content Security Policy (CSP) demo
• P3P Test Page and Validator

What additional sites should I refer to? Is there an all-in-one site that aggregates the suite of tests?

Answer 1

If you use Firefox, visit the Firefox plugin check web page. It can detect old plugins with known vulnerabilities and provide instructions on how to update them.

Answer 2

You can visit Qualys BrowserCheck to check whether your browser has any known security issues. It supports IE, Firefox, Chrome, and Safari, though you may need to install their helper plugin.

Answer 3

If you want to check for old browsers with known vulnerabilities, you use Windows, and you are willing to install software on your machine, I can highly recommend Secunia PSI. It has a large database of applications and information about their versions (what is the latest version, which versions are known to be vulnerable). It will scan your hard drive and find vulnerable/outdated versions of software installed on your system. It can detect browsers and browser plugins with known problems. However, it is not limited to browsers: it also checks for insecure versions of other software.

This may or may not be what you are looking for, but it is worth knowing about.

Answer 4

The EFF Panopticlick online browser uniqueness tester provides lots of details and should work for all types of browser. No need to add a plugin to your browser and you should be able to cross reference the version and plugin details for your needs.

Answer 5

I recently ran across Is my browser up to date?, a very simple site that checks just the version number of your browser. I cannot vouch for it, and I don't know how good it is, but it claims to support IE, Firefox, Chrome, Safari, and Opera. It does not check for vulnerable plugins, extensions, etc.