Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities

That is what Google's Michael Zalewski, who also worked on Chrome, Ratproxy and numerous other web security tools had to say while publishing Google Browser Security Handbook. This book is completely free and is licensed under the very liberal Creative Commons License that allows the distribution and modification, provided the original author is mentioned. Browser security has been an ongoing problem over the years. This book is well- documented and targeted towards web developers, browser engineers and information security researchers. Full article (420 words) »