The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
17 views

The Spring Security framework recommends against using double-submit cookies to prevent CSRF. Is their concern legitimate?

I was about the Spring Security framework's CSRF protection to see how it works. Spring doesn't use the double-submit pattern, but instead associates the CSRF token with the user's session. The ...
0
votes
1answer
99 views

How is Cross Site Flashing performed?

I read about cross site flashing in the OWASP testing guide. I know the difference between XSS and XSF. But what I am looking for is how attackers perform a XSF attack. How is it possible since there ...
1
vote
0answers
376 views

Adobe Install Redirect

I have heard of the Flash virus floating around, but after reading more I do not believe I have it. When I go to http://get.adobe.com/flashplayer/ So that I can update, 'Install Now' will redirect ...