Collected research

X41 Browser Security Whitepaper

Markus Vervier, Michele Orrù, Berend-Jan Wever and Eric Sesterhenn · github.com

A comparative security assessment of Google Chrome, Microsoft Edge and Internet Explorer covering attack surface, sandboxing, process and origin isolation, exploit mitigations, extensions, peripheral APIs and TLS. It records concrete weaknesses, including forcing a downgrade from Edge to IE via an expired compatibility-list domain and leaking local IP addresses via Edge ORTC.

Record

Researcher

Markus Vervier, Michele Orrù, Berend-Jan Wever and Eric Sesterhenn

Published by

github.com

Format

Code

Topic

Browser

In the archive

• Collected in the 2016–17 research round

Tags

• browser-extension
• sandbox-escape
• same-origin-policy
• webrtc
• info-leak
• csp
• tls
• measurement-study
• survey
• mitigation
• owasp-a01-2021
• owasp-a02-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Markus Vervier, Michele Orrù, Berend-Jan Wever and Eric Sesterhenn, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 6 August 2026.