The browser tag has no wiki summary.
-1
votes
1answer
100 views
some questions about DOM based XSS [closed]
Is it possible to do a DOM based xss attack with window.location.protocol?
How can we use dom based xss with document.title?
How can we bypass the escape javascript function if it is used?
thank ...
1
vote
1answer
170 views
What are the benefits and drawbacks of the HTML5 Keygen element?
As of January 2013, what are the potential benefits and drawbacks of the HTML5 Keygen element?
2
votes
2answers
211 views
Where do I get started in terms of learning how to exploit Java and Flash vulnerabilities? or browser exploitation in general
Another Java 0day was discovered today which got me thinking how browser exploitation (remote execution on clients browser) works.
I am unable to find any books or resources online about browser ...
2
votes
1answer
279 views
Are Web Views in android secure?
"Web Views" are views that display some online content, usually a webpage within an android app.
Implemented "Web Views" usually don't seem to have any kind of status bar or an address bar to confirm ...
3
votes
0answers
59 views
Is the use of JavaScript for cryptography ever appropriate in the browser? [duplicate]
Possible Duplicate:
How secure is aSSL (javascript)? Does it effectively mimic SSL?
After some searching around, I realized we don't have an easily visible canonical question about this on ...
8
votes
4answers
290 views
Preventing insecure webapp on subdomain compromise security of main webapp
I want your help on getting more concrete information on a type of vulnerability that I remember vaguely.
I vaguely remember hearing about a year ago that if you set up a webapp on a subdomain, and ...
2
votes
1answer
325 views
Is autocomplete=“off” compatible with all modern browsers?
There are a lot of answers on the subject (including some on StackOverflow), but none of them have recent or updated answers: I can't seem to find any documentation indicating which browsers support ...
4
votes
1answer
223 views
How to disable caching of form data?
A web page accepts user name and password data within an HTTP POST request. This POST request actually shows up as an entry in the browsers history. After user logout from the application and ...
3
votes
2answers
762 views
Why are CSRF tokens necessary?
It seems that the entire problem could be solved very elegantly by simply adding a new flag to the HTTP cookie specification.
Similarly to how cookies flagged Secure will only be submitted by the ...
3
votes
5answers
1k views
How to avoid leaving any local trace that I went to a website?
I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that?
This question is not concerned with anonymity or detection on the network ...
