Google Browser Handbook

Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities That is what Google's Michael Zalewski, who also worked on Chrome, Ratproxy and numerous other web security tools had to say while publishing Google Browser Security Handbook.