Blog post about browser/Web-app security, including:

• CSRF
• CORS
• HTTP Security Headers