A web browser is an application which uses HTTP and related protocols to retrieve HTML and XML data from servers. As the web has become a critical source of information and communication, web browsers have become a critical component in information request, transfer and management.
Questions tagged [web-browser]
1657 questions
90
votes
4 answers
Is browser history an important factor when considering security?
I discovered something I consider a major vulnerability in a SaaS product that includes the username and password in the query string of the URL on registration and every login attempt.
The technical support of the service has told me they consider…

Ivan T.
- 1,063
- 1
- 7
- 12
57
votes
8 answers
Is the Web browser status bar always trustable?
If I bring the mouse pointer to a link, but not click on it, I can see in the left/bottom corner that it displays the URL of it.
Q: Could this URL (in the left/bottom) be different from the one that my Web browser will go? (don't count that server…

newuser999
- 747
- 5
- 9
21
votes
6 answers
What protects users from fake web browsers?
Suppose a hacker creates a Windows application that looks and feels like a legitimate web browser. The user believes they are using, say, Google Chrome. If you simply watched the bits going to and from the computer over the network, it would look…

dshin
- 337
- 2
- 5
18
votes
3 answers
Google Chrome Browser - Privacy Concerns
After i saw many people using Chrome i wanted to inform myself on this browser and everything concerning it as i am a Firefox user since it existed. However i am always afraid of Google being a "data kraken" collecting as much information as…

Christian Ivicevic
- 313
- 2
- 5
13
votes
3 answers
What is the safest way to close a popup window?
The internet has many articles recommending ways to close a browser popup window without infecting your computer with malware. I've seen click the red X, use ALT-F4, go to the windows task bar, right click on your browser's icon and do a close…

Too Osborn
- 133
- 1
- 1
- 6
13
votes
6 answers
Can a website download documents, images, or other information onto my iMac without my consent or awareness?
I've heard that websites that download malicious data onto the user's computer without their consent do exist, but is this possible on an iMac as well as Windows and other operating systems? How about iPhones?
Basically, can websites download…

George B
- 241
- 2
- 5
10
votes
3 answers
Any browser that supports script-nonce?
I was trying to include script-nonce on my html file, but seems like none of the current browsers support it.
Is anyone aware of any version of any browser that supports this functionality?
I'm currently using Chrome version Version 26.0.1410.63 and…

Jagat
- 213
- 2
- 6
9
votes
5 answers
Is finding vulnerabilities in the major browsers easy or not?
If young hackers can detect them, why can't security analysts get and patch them?
Also, I dream of finding a vulnerability in a major software, like IE or Chrome. Is it easy? Is it systematic or is it random?
What books do I need to read to detect…

jaja
- 101
- 1
- 5
9
votes
1 answer
Problems with in Browser Crypto
There are lots of older articles1 on why in-browser crypto is a bad idea. Most are summed up via: http://bitwiseshiftleft.github.io/sjcl/
We believe that SJCL provides the best security which is practically available in Javascript.…

erik
- 193
- 6
8
votes
2 answers
Accessing keystrokes directed at iframe?
So I was making a virtual credit card from entropay.com and when I decided to Top up it up with my existing debit card. It opened up the 'Verified by Visa' page(A page in which you have to enter a password to authorize payment through your debit…

Kam
- 89
- 1
- 2
7
votes
3 answers
Using Lynx on potentially malicious websites
After needing to refresh how to unpack an android ramdisk, the site I remember having good information comes up with something similar to this:
Being cautious, but still wanting to get what was on the page, I turned to lynx.
Finding that lynx…

Jim
- 71
- 1
- 2
7
votes
3 answers
How can I protect my saved passwords in Chrome?
I'm currently using WIN+L, and sometimes Kid-Key-Lock, to prevent anyone from checking my storaged passwords but if I forget doing it only once, all of them are vulnerable of theft.
How can I protect my passwords from this glitch or is it not…

Renan
- 423
- 2
- 5
- 9
7
votes
2 answers
Firefox Add-ons not using HTTPS? Security bug. (?)
If I add a rule in Privoxy:
echo '{ +redirect{s@http://@https://@} }
.mozilla.org' >> /etc/privoxy/user.action
then I can't install Firefox Add-ons. Why?
I though the Firefox Add-ons installed through only HTTPS! If it's ain't using only HTTPS then…

LanceBaynes
- 6,279
- 12
- 63
- 92
7
votes
2 answers
plugins to lengthen short urls for security purposes
Came across this question
What browser plugins can help us to see the actual destination of such shortened URLs?

Kim Stacks
- 905
- 9
- 21
6
votes
2 answers
Do the most used browsers have similar security?
I read that Pwn2Own stopped attacking Firefox, apparently because it didn't make "serious security improvements" since the last competition.
Should I understand it as "Firefox is significantly more vulnerable than other browsers", or can I continue…

Hey
- 1,955
- 1
- 18
- 25