The html-5 tag has no wiki summary.
-6
votes
1answer
78 views
has my website been hacked [closed]
I have been messing about recently and seeing as html 5 elements are starting to be used by web developers I thought I would develop a website that would display the html 5 elements on my website, ...
0
votes
1answer
99 views
How does DOCTYPE selection affect security of my AJAX app?
I'm considering using modern techniques to protect my Javascript code and am studying how the DOCTYPE element selection may impact that. Specifically, the linked question used IFrames which are not ...
6
votes
3answers
575 views
How secure are self decrypting HTML files for data storage?
I recently came across a JavaScript self decrypting archive. Is it secure enough to be used as a portable password storage tool? The author has even challenged it to be cracked.
0
votes
1answer
272 views
Websocket implication for firewalls
(I've read several questions here about websocket but apparently there's no websocket tag)
If I understand correctly websockets are using TCP trafic over port 80.
What are the implication, if any, ...
2
votes
2answers
153 views
HTTPOnly Cookies: Security Depends on Client Cooperation?
I've been implementing HTTPOnly cookie-based session handling and have some questions about what HTTPOnly means.
I realise it's a flag that gets passed around in the HTTP header when setting cookies. ...
11
votes
3answers
667 views
Elaborate websockets security
I'm interested in learning more about web sockets security. Read that web sockets were originally in Firefox, removed for security reasons and now added back in with the problem resolved:
...
1
vote
1answer
175 views
What are the benefits and drawbacks of the HTML5 Keygen element?
As of January 2013, what are the potential benefits and drawbacks of the HTML5 Keygen element?
17
votes
3answers
2k views
What useful things can I do with the html5 “keygen” element?
There's a new* keygen element in the html5 spec. It's supported in major browsers excepting Internet Explorer and Safari.
Here's what it looks like:
<form action="processkey.cgi" method="post" ...
1
vote
1answer
132 views
How do I verify, parse and process the results of the HTML5 keygen tag?
I'm investigating the HTML5 attribute Keygen and discovered that it sends this data on a Form POST to the server. Here is an example POST:
...
6
votes
3answers
641 views
Are there any established mobile security frameworks or secure coding guidelines available?
I am looking for security frameworks and secure coding guidelines especially for mobile devices (Android and iOS). The languages I am interested in are Objective-C, JAVA and HTML5.
If there are no ...
4
votes
1answer
149 views
How to use postMessage securely
postMessage is a primitive introduced in HTML5 that web pages can use for cross-origin communication.
What do I need to do to use postMessage securely? What are the primary security pitfalls or ...
5
votes
2answers
694 views
HTML 5 Security Code Scanner
Are there code scanners in the market that scan HTML 5 code?
Does anyone have a list of tags of specific CORS configurations that need/can be scanned?
3
votes
2answers
332 views
HTML Vulnerabilities
My question is three-fold.
Background
I was asked to do some vulnerability scans on a website with some holes (I think). On a particular page, I was able to escape the text field and write on the ...
9
votes
3answers
744 views
localStorage for apps over https. What expectations are there?
I run an online gradebook. To keep student data private, I transfer all data over https.
Now, I'd like to use localStorage to avoid redundant calculations and server requests. However, according to ...
