The common name for the language used primarily for scripting in web browsers. It is not related to the Java language. Standardized as ECMAScript, its dialects/implementations include JavaScript and JScript.
0
votes
2answers
143 views
Is a browser with disabled scripts and disabled java enough against malware
Is a browser like Firefox with disabled scripts (for example via a plugin like no-script) and disabled java enough to be protected against dryve-by-malware from the internet.
Of course this does not ...
0
votes
1answer
148 views
Security Testing AngularJS Web Application
An angularjs application stores user input to local/sessionStorage and retrieves it later to fill the form fields or display that content later. If a javascript is submitted as user input, it gets ...
0
votes
1answer
207 views
Sanitizing JavaScript to prevent XSS
I'm going through a vulnerability remediation exercise for a client and am trying to figure out how to best mitigate this particular hole. There's a script on our site that calls up content into a new ...
0
votes
1answer
99 views
How does DOCTYPE selection affect security of my AJAX app?
I'm considering using modern techniques to protect my Javascript code and am studying how the DOCTYPE element selection may impact that. Specifically, the linked question used IFrames which are not ...
0
votes
1answer
98 views
Can a Javascript - WebGL proof of work system prevent website spam?
Is it a good idea to come up with a Javascript-based Proof of Work system to reduce spam on forums, and other websites?
This idea would be similar to HashCash, but the computation would be based on ...
0
votes
1answer
376 views
How to escape user input in a value of javascript object?
How to properly escape user-controlled input when it's inserted as a value in JSON object?
<script>
$(document).ready(function() {
new MyObject({
key1: "user_input",
key2: ...
0
votes
3answers
980 views
Set Cookie in XHR response : How different browsers handle this?
If I send a XHR request to example.com and response has Set-Cookie: dummyCookie=dummy in response.
How different browsers handle this?
Does any version of any browser set the cookie for ...
0
votes
0answers
115 views
Encryption in Messaging/RAbbitMQ/SOA [closed]
I'm a student and now 2nd time poster, please excuse any lacking detail on my part.
For my exams I'm doing a cross-platorm application using RabbitMQ for messaging. It'll serve as POC for both SOA ...
0
votes
0answers
54 views
open source web development plugins,scripts store information? [closed]
I'm wondering if open source plugins like wordpress,drupal or jquery and many more detect for example what websites are using their plugin.
If so, is there any plugin which can detect which website ...
0
votes
0answers
236 views
which scanner can detect scripts with malicious javascript on the server? [closed]
We've noticed several security warnings from antivirus software when visiting one of our customer's pages.
Besides other steps to improve security, we now want to scan the server's directories for ...
-1
votes
4answers
132 views
How secure is this login page? [closed]
Unfortunately I cant link to the page (it internal). But I can describe it!
This is a lightspeed systems policy enforcement login page (content filter).
The page is http and there is no iframe with ...
-1
votes
1answer
111 views
Idea feedback wanted - easy and secure web notes manager (javascript) [closed]
I have an idea for a web app that I'd like to discuss. I like it a lot but chances are that I missed some evident security hole. Or, maybe it just sucks.
The idea is a web-based secure text notes ...
-1
votes
1answer
146 views
can someone break my anti dom based xss from the window location? [closed]
can someone break my anti dom based xss from the window location ?
function parseparameters()
{
var href = window.location.href;
var id = href.indexOf('#');
if (id ...
-1
votes
1answer
204 views
Why don't G+, Facebook and Twitter use text editors to share? Why would someone receive each separately? [closed]
I've seen sites use text editors as below:
What is the risk in using these? G+ receives images individually, others receive it all at once. Could someone shed some light on it?
-1
votes
1answer
101 views
some questions about DOM based XSS [closed]
Is it possible to do a DOM based xss attack with window.location.protocol?
How can we use dom based xss with document.title?
How can we bypass the escape javascript function if it is used?
thank ...
-1
votes
1answer
159 views
how to secure my login user id and passwords specially for facebook [closed]
i think they hack me with facebook cookies.
i dont get what exactly is going on with me. every time i get the login notification from another ip location.i want to secure my cookies and i wanted to ...
-2
votes
1answer
110 views
When logging into a web page what exactly happens when a user types the wrong password?
I have two related questions as to what happens when a user tries to log in to a website
If the entered password is wrong what should happen?
I have two ideas:
Redirect to a page saying "wrong ...
-3
votes
0answers
45 views
User entered Javascript security implications [duplicate]
I'm creating a web site that lets people create their own site using a subdomain. Are there any security implications by letting people add custom javascript to their pages? If so, which ones? XSS? ...
-5
votes
0answers
80 views
What kind of equipment and make and model in the movie The Girl With The Dragon Tattoo (2011) [closed]
What kind of cameras are used by lisbeth in the film. I know they had a vaio sort of laptop but I can't find any information on the make and model of the cameras. All I saw was that she used Milton ...
