Disclosure: I received a review copy of this title from O’Reilly Oh, Cheryl, what a tangled web we weave when we something-something on Christmas Eve - According to Jim For obvious reasons the above quote came into my head every time I picked up The Tangled Web by Michal Zalewski . It always makes me smile… In The Tangled Web Mr. Zalewski paints a grim picture of web security, explaining in some detail the confluence of conflicting standards, incomplete RFCs, inconsistent browser behaviors and other anomolies that lead to today's current (spoiler alert: not good) state of web security. This title is different than any other I've read on web security. It isn't a web security handbook by any means - it is more a descriptive history of the evolution of web standards and languages, focusing on decisions made that impact web security to this day. The author delves into every aspect of the web - HTML, HTTP, CSS, scripting languages, browers, plugins, etc. in a