WebSpec, a formal framework for browser security analysis, reveals new cookie attack

Boffins in Vienna devise way to make software prove how it behaves
Folks at Technische Universität Wien in Austria have devised a formal security framework called WebSpec to analyze browser security.…