Web Application Security

Contents at a Glance

PART I Primer

1 Welcome to the Wide World of Web Application Security

2 Security Fundamentals

PART II Web Application Security Principles

3 Authentication

4 Authorization

5 Browser Security Principles: The Same-Origin Policy

6 Browser Security Principles: Cross-Site Scripting and Cross-Site Request Forgery

7 Database Security Principles

8 File Security Principles

PART III Secure Development and Deployment

9 Secure Development Methodologies

Epilogue The Wizard, the Giant, and the Magic Fruit Trees: A Happy Ending