Books › The tangled Web
The tangled Web
299 pages
A deep, authoritative dive into the chaotic architecture of the modern web, offering developers a lifeline through the complexities of browser security.
What it feels like
Reading this book feels like sitting down with a master architect to dissect a sprawling, haphazardly built city. The pace is steady and deliberate, guiding the reader through the tangled, often insecure foundations of modern web applications. The mood is highly intellectual and focused, steeped in the pragmatic reality of digital vulnerabilities. Rather than offering superficial fixes, the narrative dives deep into the why and how of browser mechanics, creating an atmosphere of rigorous analytical problem-solving. The prose is authoritative yet accessible to the initiated, structured with practical cheat sheets that ground the theory in immediate utility. It is a deeply empowering read for developers and security professionals who want to transform their anxiety over systemic flaws into confident, actionable expertise.
- Mood
- intellectual
- focused
- complex
- Tone
- authoritative
- analytical
- pragmatic
- cautionary
- Pace
- steady
- Themes
- technological vulnerability · system complexity · digital security · problem-solving
- The writing
- Clear, comprehensive, and highly technical, structured to demystify complex systems while providing actionable reference material.
- The arc
- Moves from a daunting realization of systemic vulnerabilities to a grounded sense of technical empowerment.
- Who it's for
- Web developers, security engineers, and tech professionals looking to deeply understand and secure modern browser applications.
About the book
"'Thorough and comprehensive coverage from one of the foremost experts in browser security.' --Tavis Ormandy, Google Inc. Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape.In The Tangled Web, Michal Zalewski, one of the world's top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they're fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You'll learn how to: Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization Use modern security features like Strict Transport Security, CSP, and CORS Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs Build mashups and embed gadgets without getting stung by the tricky frame navigation policy Embed or host user-supplied content without running into the trap of content sniffing For quick reference, "Security Engineering Cheat Sheets' at the end of each chapter offer ready solutions to problems you're most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications to stand the test of time"--
Description from Open Library.
Books like The tangled Web
See why they match
Secrets and LiesBruce SchneierA sobering, accessible reality check that strips away the illusion of digital safety and replaces it with practical vigilance.
HackingJon EricksonA hands-on, deep-dive into the elegant, hidden mechanics of computer systems and the creative art of breaking them.
Practical Malware AnalysisMichael Sikorski and Andrew HonigA rigorous, hands-on masterclass in dissecting digital threats that feels like solving high-stakes puzzles.
Hacking for DummiesKevin BeaverAn approachable, jargon-free guide that turns the intimidating world of cybersecurity into an empowering toolkit for digital self-defense.
Mastering Bitcoin: Unlocking Digital CryptocurrenciesAndreas M. AntonopoulosA comprehensive, illuminating deep-dive into the architecture and potential of decentralized digital currency.
RESTful Web ServicesLeonard Richardson and Sam RubyA clarifying, pragmatic guide that transforms the chaos of web development into an elegant, resource-oriented philosophy.