prevention of an attack vector (e.g. XSS, HPP, CSRF)

learn more… | top users | synonyms

8
votes
2answers
2k views

MIME sniffing protection

As it is known, older versions of MSIE (before 8) have a nasty habit of treating images as HTML if they "look like" HTML, which can lead to nasty vulnerabilities for sites that allow people to upload ...
18
votes
3answers
3k views

What steps should be taken to validate user uploaded images within an application?

Recently I have worked on a number of applications that need to process user uploaded images steps have been taken to validate the extension and the mime type. But what else can be done to ensure ...
-1
votes
2answers
512 views

What can one define as quality criteria for an XML Schema?

One of the usage of Input validation, is to be protect against XSS. In case one would need to define best practice for the functions validating the input, then some (which I am calling quality ...
5
votes
2answers
210 views

How can my country's legal/telecoms environment protect against cold-callers conning a remote-access session to the victim's computer?

My local region in Australia is being targeted by a scam whereby victims are cold-called and told that their computer is sending 'errors' to caller at 'Windows' which should be fixed ASAP, and they ...