The Tangled Web: A Guide to Securing Modern Web Applications Book PDF, ePub eBook
The Tangled Web: A Guide to Securing Modern Web Applications.pdf
File Name: The Tangled Web: A Guide to Securing Modern Web Applications.pdf
Size: 39.40 MB
Uploaded: 2017-01-9 00:45:34
Status: AVAILABLE Last checked: 15 Minutes ago!
Rating: ★★★★★ 93 out of 100 based on 8880 user
Book Descriptions:
"Thorough and comprehensive coverage from one of the foremost experts in browser security."
—Tavis Ormandy, Google Inc.
Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape.
In The Tangled Web, Michal Zalewski, one of the world's top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they're fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You'll learn how to:
- Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization
- Use modern security features like Strict Transport Security, Content Security Policy, and Cross-Origin Resource Sharing
- Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs
- Build mashups and embed gadgets without getting stung by the tricky frame navigation policy
- Embed or host user-supplied content without running into the trap of content sniffing
For quick reference, "Security Engineering Cheat Sheets" at the end of each chapter offer ready solutions to problems you're most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications that stand the test of time.
The Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski
From reader reviews:Raymond Custer:
The book The Tangled Web: A Guide to Securing Modern Web Applications can give more knowledge and information about everything you want. So why must we leave the good thing like a book The Tangled Web: A Guide to Securing Modern Web Applications? Some of you have a different opinion about reserve. But one aim in which book can give many facts for us. It is absolutely suitable. Right now, try to closer with the book. Knowledge or details that you take for that, it is possible to give for each other; you can share all of these. Book The Tangled Web: A Guide to Securing Modern Web Applications has simple shape however you know: it has great and massive function for you. You can seem the enormous world by wide open and read a book. So it is very wonderful.
Alma Miranda:
What do you about book? It is not important along with you? Or just adding material when you require something to explain what your own problem? How about your time? Or are you busy individual? If you don't have spare time to complete others business, it is give you a sense of feeling bored faster. And you have free time? What did you do? Everybody has many questions above. They have to answer that question due to the fact just their can do that. It said that about guide. Book is familiar on every person. Yes, it is appropriate. Because start from on pre-school until university need this The Tangled Web: A Guide to Securing Modern Web Applications to read.
Jennifer Pittman:
In this 21st hundred years, people become competitive in every way. By being competitive today, people have do something to make them survives, being in the middle of the actual crowded place and notice simply by surrounding. One thing that oftentimes many people have underestimated this for a while is reading. Yes, by reading a publication your ability to survive increase then having chance to remain than other is high. For yourself who want to start reading any book, we give you that The Tangled Web: A Guide to Securing Modern Web Applications book as basic and daily reading publication. Why, because this book is greater than just a book.
Ella Hodge:
E-book is one of source of understanding. We can add our know-how from it. Not only for students but also native or citizen need book to know the change information of year to help year. As we know those textbooks have many advantages. Beside all of us add our knowledge, can bring us to around the world. From the book The Tangled Web: A Guide to Securing Modern Web Applications we can get more advantage. Don't that you be creative people? To become creative person must like to read a book. Only choose the best book that appropriate with your aim. Don't always be doubt to change your life with this book The Tangled Web: A Guide to Securing Modern Web Applications. You can more desirable than now.
How it works:
- 1. Register a free 1 month Trial Account.
- 2. Download as many books as you like (Personal use)
- 3. Cancel the membership at any time if not satisfied.
