I am trying to work on security architecture for our SaaS application. The good finding was Azure AD B2C which is launched recently. And first comparison was with Auth0. Is this is correct ...
1) If a web application does NOT use any Flash content, does it require crossdomain / clientacess policy file ? 2) If a web application does not host crossdomain / clientaccess policy file, is it ...
Some examples: static code analysis (Fortify) code coverage (bugs being a potential source of vulnerabilities) others? In case it isn't obvious, the code is available to audit and measure.