The Tangled Web is written by Michal Zalewski. The book is the updated version of the famous Browser Handbook. [1] I still recommend looking at it if you can't

The Tangled Web is written by Michal Zalewski. The book is the updated version of the famous Browser Handbook. [1] I still recommend looking at it if you can't get The Tangled Web. IMO, this is the bible of web security today. I really hope people can put together a web security book (and free) that is up-to-date. To me, the Tangled Web does a pretty good job, but there are still nuts and bolts missing or wordy. OWASP wiki is okay-ish but I really hate digging the wiki just to find the information is either incorrect or outdated. [1]: https://code.google.com/p/browsersec/ https://code.google.com/p/browsersec/