Imagen 1 de 14
The Tangled Web: A Guide to Securing Modern Web Applications, Zalewski, Michal, -
Estado:
Precio:
USD24,99
Aproximadamente23,39 EUR
- ¡Cómpralo ya!The Tangled Web: A Guide to Securing Modern Web Applications, Zalewski, Michal,
Envío:
Ubicado en: Orem, Utah, Estados Unidos
Entrega:
Entrega prevista entre el mié. 26 jun. y el sáb. 29 jun. a 43230
Devoluciones:
Pagos:
Compra con confianza
Información del vendedor
Registrado como vendedor particular, por lo que no se aplican los derechos de los consumidores derivados de la ley de protección de los consumidores de la UE. La Garantía al cliente de eBay sigue aplicando a la mayoría de las compras.Más informaciónRegistrado como vendedor particular
El vendedor asume toda la responsabilidad de este anuncio.
N.º de artículo de eBay:266400019580
Características del artículo
- Estado
- Book Title
- The Tangled Web: A Guide to Securing Modern Web Applications
- ISBN
- 9781593273880
- Subject Area
- Computers
- Publication Name
- Tangled Web : a Guide to Securing Modern Web Applications
- Publisher
- No Starch Press, Incorporated
- Item Length
- 9.2 in
- Subject
- Internet / General, Networking / General, Security / General, Security / Networking, Networking / Network Protocols
- Publication Year
- 2011
- Type
- Textbook
- Format
- Trade Paperback
- Language
- English
- Item Height
- 0.8 in
- Features
- New Edition
- Item Weight
- 21.8 Oz
- Item Width
- 6.9 in
- Number of Pages
- 320 Pages
Acerca de este producto
Product Identifiers
Publisher
No Starch Press, Incorporated
ISBN-10
1593273886
ISBN-13
9781593273880
eBay Product ID (ePID)
109201203
Product Key Features
Number of Pages
320 Pages
Language
English
Publication Name
Tangled Web : a Guide to Securing Modern Web Applications
Publication Year
2011
Subject
Internet / General, Networking / General, Security / General, Security / Networking, Networking / Network Protocols
Features
New Edition
Type
Textbook
Subject Area
Computers
Format
Trade Paperback
Dimensions
Item Height
0.8 in
Item Weight
21.8 Oz
Item Length
9.2 in
Item Width
6.9 in
Additional Product Features
Intended Audience
Trade
LCCN
2011-039636
Reviews
"A classic - arguably canon - as far as security training books go, and especially when it comes to web application security." --Britt Kemp, Bishop Fox Labs
Dewey Edition
23
Illustrated
Yes
Dewey Decimal
005.8
Edition Description
New Edition
Table Of Content
Preface and Acknowledgments 1. Security in the World of Web Applications Part I: Anatomy of the Web 2. It Starts with A URL 3. Hypertext Transfer Protocol 4. Hypertext Markup Language 5. Cascading Style Sheets 6. Browser-Side Scripts 7. Non-HTML Document Types 8. Content Rendering with Browser Plug-Ins Part II: Browser Security Features 9. Content Isolation Logic 10. Origin Inheritance 11. Life Outside Same-Origin Rules 12. Other Security Boundaries 13. Content Recognition Mechanisms 14. Dealing with Rogue Scripts 15. Extrinsic Site Privileges Part III: A Glimpse of Things to Come 16. New and Upcoming Security Features 17. Other Browser Mechanisms of Note 18. Common Web Vulnerabilities Epilogue Notes Index
Synopsis
"Thorough and comprehensive coverage from one of the foremost experts in browser security." --Tavis Ormandy, Google Inc. Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape. In The Tangled Web, Michal Zalewski, one of the world's top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they're fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You'll learn how to: * Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization * Use modern security features like Strict Transport Security, Content Security Policy, and Cross-Origin Resource Sharing * Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs * Build mashups and embed gadgets without getting stung by the tricky frame navigation policy * Embed or host user-supplied content without running into the trap of content sniffing For quick reference, "Security Engineering Cheat Sheets" at the end of each chapter offer ready solutions to problems you're most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications that stand the test of time., Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape. In The Tangled Web, Michal Zalewski, one of the world s top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they re fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You ll learn how to: Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization Use modern security features like Strict Transport Security, Content Security Policy, and Cross-Origin Resource Sharing Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs Build mashups and embed gadgets without getting stung by the tricky frame navigation policy Embed or host user-supplied content without running into the trap of content sniffing For quick reference, 'Security Engineering Cheat Sheets' at the end of each chapter offer ready solutions to problems you re most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications that stand the test of time., Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, comes with important yet subtle security consequences. To keep users safe, it is essential for developers to confidently navigate this landscape. In The Tangled Web , Michal Zalewski, one of the world's top browser security experts, offers a compelling narrative that explains exactly how browsers work and why they're fundamentally insecure. Rather than dispense simplistic advice on vulnerabilities, Zalewski examines the entire browser security model, revealing weak points and providing crucial information for shoring up web application security. You'll learn how to: -Perform common but surprisingly complex tasks such as URL parsing and HTML sanitization -Use modern security features like Strict Transport Security, Content Security Policy, and Cross-Origin Resource Sharing -Leverage many variants of the same-origin policy to safely compartmentalize complex web applications and protect user credentials in case of XSS bugs -Build mashups and embed gadgets without getting stung by the tricky frame navigation policy -Embed or host user-supplied content without running into the trap of content sniffing For quick reference, "Security Engineering Cheat Sheets" at the end of each chapter offer ready solutions to problems you're most likely to encounter. With coverage extending as far as planned HTML5 features, The Tangled Web will help you create secure web applications that stand the test of time., "Thorough and comprehensive coverage from one of the foremost experts in browser security." --Tavis Ormandy, Google Inc. Modern web applications are built on a tangle of technologies that have been developed over time and then haphazardly pieced together. Every piece of the web application stack, from HTTP requests to browser-side scripts, ......
LC Classification Number
TK5105.59.Z354 2011
Copyright Date
2011
ebay_catalog_id
4
Descripción del artículo del vendedor
El vendedor asume toda la responsabilidad de este anuncio.
N.º de artículo de eBay:266400019580
Envío y manipulación
Ubicación del artículo:
Orem, Utah, Estados Unidos
Realiza envíos a:
Afganistán, Albania, Alemania, Andorra, Angola, Anguila, Antigua y Barbuda, Arabia Saudí, Argelia, Argentina, Armenia, Aruba, Australia, Austria, Azerbaiyán, Bahamas, Bahréin, Bangladés, Belice, Benín, Bermudas, Bolivia, Bosnia-Herzegovina, Botsuana, Brasil, Brunéi, Bulgaria, Burkina Faso, Burundi, Bután, Bélgica, Cabo Verde, Camboya, Camerún, Canadá, Chad, Chile, China, Chipre, Colombia, Corea del Sur, Costa Rica, Costa de Marfil, Dinamarca, Ecuador, Egipto, El Salvador, Emiratos Árabes Unidos, Eritrea, Eslovaquia, Eslovenia, España, Estados Unidos, Estonia, Etiopía, Fiji, Filipinas, Finlandia, Francia, Gabón, Gambia, Georgia, Ghana, Gibraltar, Granada, Grecia, Groenlandia, Guatemala, Guinea, Guinea Ecuatorial, Guinea-Bisáu, Guyana, Haití, Honduras, Hong Kong, Hungría, India, Indonesia, Irlanda, Islandia, Islas Caimán, Islas Salomón, Islas Turcas y Caicos, Israel, Italia, Jamaica, Japón, Jordania, Kazajistán, Kenia, Kirguistán, Kiribati, Kuwait, Laos, Lesoto, Letonia, Liberia, Liechtenstein, Lituania, Luxemburgo, Líbano, Macao, Macedonia, Madagascar, Malasia, Malaui, Maldivas, Malta, Malí, Marruecos, Mauricio, Mauritania, Moldavia, Mongolia, Montenegro, Montserrat, Mozambique, México, Mónaco, Namibia, Nauru, Nepal, Nicaragua, Nigeria, Noruega, Nueva Zelanda, Níger, Omán, Pakistán, Panamá, Papúa Nueva Guinea, Paraguay, Países Bajos, Perú, Polonia, Portugal, Qatar, Reino Unido, República Centroafricana, República Checa, República Democrática del Congo, República Dominicana, República de Croacia, República del Congo, Ruanda, Rumanía, Samoa, San Cristóbal y Nieves, San Marino, San Vicente y las Granadinas, Santa Lucía, Senegal, Serbia, Seychelles, Sierra Leona, Singapur, Sri Lanka, Suazilandia, Sudáfrica, Suecia, Suiza, Surinam, Tailandia, Taiwán, Tanzania, Tayikistán, Togo, Tonga, Trinidad y Tobago, Turkmenistán, Turquía, Túnez, Uganda, Uruguay, Uzbekistán, Vanuatu, Vaticano, Vietnam, Wallis y Futuna, Yemen, Yibuti, Zambia, Zimbabue
Excluye:
Barbados, Federación Rusa, Guadalupe, Guayana Francesa, Libia, Martinica, Nueva Caledonia, Polinesia Francesa, Reunión, Ucrania, Venezuela
| Envío y manipulación | A | Servicio | Entrega*Consulta las notas de entrega |
|---|---|---|---|
| USD4,87 (aprox. 4,56 EUR) | Estados Unidos | Envío Económico (USPS Media MailTM) | Entrega prevista entre el mié. 26 jun. y el sáb. 29 jun. a 43230 |
| Tiempo de manipulación |
|---|
| Normalmente, se enviará en un plazo de 3 días laborables desde que se haga efectivo el pago. |
| Impuestos |
|---|
| Puede que se apliquen impuestos durante el pago y envío. Más informaciónMás información sobre el pago de impuestos en las compras de eBay. |
Impuesto de ventas del artículo 266400019580
Impuesto de ventas del artículo 266400019580
El vendedor carga un impuesto de ventas por los artículos enviados a los siguientes estados:
| Estado o provincia | Porcentaje de impuesto de ventas |
|---|
Política de devoluciones
| Detalles de la política de devoluciones |
|---|
| El vendedor no acepta la devolución de este artículo. |
Pulsa aquíaquí para obtener más información sobre devoluciones. En las transacciones que cumplan los requisitos necesarios, estarás cubierto por la Garantía al cliente de eBay si recibiste un artículo que es distinto de la descripción que aparece en el anuncio.
Detalles de pago
Formas de pago
Nota: como resultado de la valoración de riesgo del comprador, es posible que algunas formas de pago no estén disponibles en el proceso de Pago y envío.
Registrado como vendedor particular
Por tanto, no se aplican los derechos de los consumidores derivados de las leyes de protección de los consumidores de la UE. La Garantía al cliente de eBay sigue aplicando a la mayoría de compras. Más informaciónMás información
Votos de vendedor (2.150)
a***a (38)- Votos emitidos por el comprador.
Mes pasado
Compra verificada
very pleased... Thank you!
z***n (1695)- Votos emitidos por el comprador.
Mes pasado
Compra verificada
great seller
e***b (494)- Votos emitidos por el comprador.
Mes pasado
Compra verificada
Excellent , Professional Packing , Helpful Communication, As Described , Thank You ! Highly Recommended Seller, Will Buy Again