Browser security

The same-origin policy (SOP) is a fundamental rule that restricts scripts from accessing data from different origins, preventing malicious sites from reading sensitive information from other domains.¹ Sandboxing isolates browser processes, so that a compromised renderer cannot directly access the operating system; modern browsers like Chrome and Firefox use multi-process architectures with strict privilege separation.² Transport Layer Security (TLS) encrypts data in transit, and browsers now enforce HTTPS by default, warning users on insecure HTTP pages.³ Content Security Policy (CSP) allows sites to restrict which scripts and resources can execute, mitigating cross-site scripting (XSS) attacks.⁴ Automatic updates ensure that security patches reach users quickly, reducing the window of vulnerability exploitation.

Phishing attacks trick users into revealing credentials via fake login pages, often using lookalike domains and social engineering.⁵ Malicious extensions can exfiltrate data or inject ads, prompting browsers to enforce stricter extension permissions and review processes.² Drive-by downloads exploit unpatched vulnerabilities to install malware without user interaction, often through compromised ad networks.⁶ Man-in-the-middle attacks on unsecured Wi-Fi can intercept traffic, though HTTPS mitigates this risk. Browser exploits target memory corruption bugs, such as use-after-free, to achieve remote code execution; these are often sold on the dark web as zero-day exploits.⁷

Browsers integrate safe browsing features that block known malicious URLs and warn users before visiting dangerous sites.⁵ Password managers built into browsers encourage unique passwords and flag reused credentials, reducing the impact of data breaches.³ Incognito or private browsing modes do not save history or cookies, but they do not hide activity from websites or ISPs.⁸ Pop-up blockers and download scanners provide additional layers of defense. Users are advised to keep browsers updated, avoid installing unnecessary extensions, and verify site authenticity before entering sensitive information.

Browser security extends to enterprise environments, where managed browsers enforce policies like URL filtering and data loss prevention.² The concept of "browser isolation" renders web content in a remote virtual machine, sending only pixels to the user's device, which neutralizes many client-side attacks.⁶ Side-channel attacks like Spectre and Meltdown exploited CPU speculative execution to steal data from browser processes, leading to mitigations such as site isolation in Chrome.⁷ The Tor Browser, based on Firefox, routes traffic through an anonymizing network to protect user privacy, but it also introduces unique security challenges.⁸ WebAssembly, while enabling high-performance applications, expands the attack surface, prompting research into sandboxing and memory safety.

Same-origin policy

A security rule that restricts web scripts to access data only from the same origin (scheme, host, port).

Sandboxing

Isolating processes to limit the impact of a compromise.

Cross-site scripting (XSS)

An attack that injects malicious scripts into trusted websites.

Zero-day exploit

An attack that exploits a previously unknown vulnerability.