HTML (HyperText Markup Language) is a language used to created web pages.
6
votes
6answers
307 views
Cleartext password in HTML
Is there any problem with outputing a user's password to the HTML in an hidden field (see use case below before flaming xD)?
The use case is a registration form with two steps. The user fills in the ...
4
votes
3answers
129 views
Sharing Nmap scan results in a web page
Is there a tool that allow the sharing of nmap scan results ? I know nmap can produce XML and I can easily convert them in HTML.
I would like to know if there is a tool with more features. For ...
3
votes
4answers
283 views
how can you inject malicious code into an innocent-looking URL?
I am learning about XSS attacks. Wikipedia says that in a non-persistent attack an attacker may provide an innocent-looking URL that "points to a trusted site but actually has an XSS vector." What ...
6
votes
3answers
229 views
Is there a way to bypass Django's XSS escaping with “unicode”?
Django (the Python web framework) escapes output to prevent XSS (Cross Site Scripting) attacks. It replaces ', ", <, >, & with their HTML safe versions.
However this presentation on slide ...
7
votes
1answer
353 views
What possible use does an iFrame have for security?
I'm looking at code for an old login form I'm redesigning. It's a simple table with two input fields for username and password.
But just before the end </table> tag there's a blank iFrame which ...
3
votes
3answers
191 views
Stop code injections into page code
I started a topic HERE on the stackoverflow site, but was refered here.
I did get some info there, but think it need's more indepth input.
So hopefuly people here can help.
I have a few domains ...
1
vote
4answers
322 views
Simple solution to XSS
I've got an idea as to how to defeat XSS so simple that it may work and was wondering if anybody had already done something similar.
The goal here is not efficiency but security. In other words I ...
0
votes
1answer
529 views
“pagesinxt.com” links in the sourcecode, am I being hacked?
At this moment I am being hacked and I do not know to stop it. Let me explain...
My website is hosted in a VPS where I am the only person who has access to it. The page is builtwith ...
-1
votes
1answer
108 views
How Do Spammers Exploit Mailto Fields?
I was interested in finding out how spammers can target my Mailto link to send out spams.
mailto:foo@domain.com?subject=foo
Is it just a case of appending
?from=foo?to=victim1;victim2;victim3
to ...
2
votes
2answers
153 views
HTTPOnly Cookies: Security Depends on Client Cooperation?
I've been implementing HTTPOnly cookie-based session handling and have some questions about what HTTPOnly means.
I realise it's a flag that gets passed around in the HTTP header when setting cookies. ...
6
votes
2answers
245 views
Attack Vectors for Purely Static Website (HTML and CSS)
I am sorry if this is a too trivial question, but once I was told that only a fool is sure of anything: as I am not sure about this question, I am willing to risk my neck by asking it anyway, all in ...
1
vote
2answers
152 views
Breaking out of attribute in double quotes
I have a piece of code that allows for
[url]someurl[/url]
BB-Code and replaces it with
<a href="someurl">someurl</a>
It takes two precautions to prevent XSS.
It replaces ...
1
vote
1answer
175 views
What are the benefits and drawbacks of the HTML5 Keygen element?
As of January 2013, what are the potential benefits and drawbacks of the HTML5 Keygen element?
1
vote
1answer
130 views
Closing an HTML tag without using the actual character
I'm currently learning how to perform XSS on websites, but there is a constant problem that keeps recurring that I'm sure must be easy to bypass.
Quite often, the website will filter out quotation ...
11
votes
3answers
290 views
What does a HTML filter need to do, to protect against SVG attacks?
I recently learned that SVG (Scalable Vector Graphics) images introduce a number of opportunities for subtle attacks on the web. (See paper below.) While SVG images may look like an image, the file ...
10
votes
1answer
368 views
How can I embed iframe securely without restricting its functionality?
I'd want to embed an iframe from untrusted site into web application. Iframe:
should be able to run Javascript and browser plugins (Flash, etc.)
should not be able to access my web application ...
4
votes
4answers
240 views
Is it possible to make an xss with only html tags
I'm not aware of all the xss tricks..
While programming in Ruby on Rails, using a sanitize method to allow only certain tags and it makes its best to clear all the other tags and scripts
the ...
0
votes
1answer
94 views
How do I prevent my Rails application from attack? [closed]
My website is being nuked by new signups and new posts some of which don't even have user.id associated with.
How do I solve this? What code should I add to the user#new page and/or post#new page.
...
0
votes
1answer
99 views
Comparison between Data Encryption Tools and Data Sanitization Tools [closed]
What are the famous Data Sanitization Tools for languages such as ASP/PHP/Html Web Sites?
Which Data Sanitization tools have the best results?
Difference between Data encryption and Data ...
7
votes
2answers
377 views
Drupal filters XSS with regexes. What could bypass it?
Drupal filters HTML strings against XSS attacks using regexes: http://api.drupal.org/api/drupal/includes%21common.inc/function/filter_xss/7
However, as a lot of people know, HTML can't be parsed with ...
0
votes
0answers
152 views
Robust HTML Parser [closed]
I was reading a book(The Tangled Web) -- what I list below is my understanding of the steps involved in writing a good markup filter.
- build an in-memory document tree
- walk the tree
...
7
votes
4answers
160 views
Limited JavaScript app scenario: Attack vectors and mitigation
I'm going to be developing a single page JavaScript app which allows input via a textarea. This input is never sent to the server, never shown to another user, and will only be persisted in browser ...
0
votes
1answer
133 views
Does filtering HTML syntax prevent a web shell from being dropped through a textbox? [closed]
I have an admin panel that is running off a mysql db. On that panel, I have text boxes that allow an "Admin" to input plain text OR HTML Styling that will be displayed on a section of the site that is ...
0
votes
0answers
62 views
Can I extend the validity of a nonce-code? [closed]
I made a URL Shortener on the admin interface of my website. The provider of the Shortener (YOURLS) secured the admin page with a security token, a nonce with 10 to 12 characters. I copied the whole ...
1
vote
5answers
705 views
Is it secure to use jQuery on the server-side for user input validation?
I'm thinking about using jQuery on the server-side (node.js) to validate user input (filter tags, remove every attributes except href, rel, target & style, modify css rules which are applied ...
4
votes
2answers
253 views
Workarounds for :visited CSS History reconnaissance
Several years ago it was possible to use
a:visited {
background: url('/log.php');
}
to figure out on what website user has been previously. But now it is restricted by browsers. Is there any ...
2
votes
4answers
303 views
Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?
Why not? Seems like this is only used for clickjacking, the solution should be simple enough.
