The browser tag has no wiki summary.
3
votes
3answers
39 views
Encryption in HTTPs is done by browser or by system?
This may be a common sense question, but I am not able to find any documentation on this after searching on google for a long time
When browser makes a HTTPs request, does it encrypt the data then ...
3
votes
5answers
1k views
How to avoid leaving any local trace that I went to a website?
I want to visit a web site, but I want to ensure there is no trace left on my computer that I did so. How do I do that?
This question is not concerned with anonymity or detection on the network ...
2
votes
2answers
235 views
Where do I get started in terms of learning how to exploit Java and Flash vulnerabilities? or browser exploitation in general
Another Java 0day was discovered today which got me thinking how browser exploitation (remote execution on clients browser) works.
I am unable to find any books or resources online about browser ...
0
votes
0answers
67 views
Can't download on any browser after virus infection [migrated]
After virus removal, a machine I support is having issues downloading anything from the net using either IE or Chrome. Attempts to download bring up the browser's own warning bar to say it may be ...
-1
votes
1answer
118 views
some questions about DOM based XSS [closed]
Is it possible to do a DOM based xss attack with window.location.protocol?
How can we use dom based xss with document.title?
How can we bypass the escape javascript function if it is used?
thank ...
1
vote
1answer
221 views
What are the benefits and drawbacks of the HTML5 Keygen element?
As of January 2013, what are the potential benefits and drawbacks of the HTML5 Keygen element?
2
votes
1answer
310 views
Are Web Views in android secure?
"Web Views" are views that display some online content, usually a webpage within an android app.
Implemented "Web Views" usually don't seem to have any kind of status bar or an address bar to confirm ...
3
votes
0answers
60 views
Is the use of JavaScript for cryptography ever appropriate in the browser? [duplicate]
Possible Duplicate:
How secure is aSSL (javascript)? Does it effectively mimic SSL?
After some searching around, I realized we don't have an easily visible canonical question about this on ...
8
votes
4answers
307 views
Preventing insecure webapp on subdomain compromise security of main webapp
I want your help on getting more concrete information on a type of vulnerability that I remember vaguely.
I vaguely remember hearing about a year ago that if you set up a webapp on a subdomain, and ...
2
votes
1answer
390 views
Is autocomplete=“off” compatible with all modern browsers?
There are a lot of answers on the subject (including some on StackOverflow), but none of them have recent or updated answers: I can't seem to find any documentation indicating which browsers support ...
4
votes
1answer
233 views
How to disable caching of form data?
A web page accepts user name and password data within an HTTP POST request. This POST request actually shows up as an entry in the browsers history. After user logout from the application and ...
3
votes
2answers
998 views
Why are CSRF tokens necessary?
It seems that the entire problem could be solved very elegantly by simply adding a new flag to the HTTP cookie specification.
Similarly to how cookies flagged Secure will only be submitted by the ...
