2 Browser security

In this chapter

  • How a web browser protects its users
  • How to set HTTP response headers to lock down where your web application can load resources from
  • How the browser manages network and disk access
  • How the browser secures cookies
  • How browsers can inadvertently leak history information

In his 1975 textbook States of Matter (Prentice-Hall), science writer David L. Goodstein starts with the following ominous introduction:

Ludwig Boltzmann, who spent most of his life studying statistical mechanics, died in 1906, by his own hand. Paul Ehrenfest, carrying on the work, died similarly in 1933. Now it is our turn to study statistical mechanics.

We will probably never know why Goodstein strikes up such a depressing note (and we can ...

Get Grokking Web Application Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.