Tagged Questions
0
votes
1answer
42 views
What would be a safe number of HTTP redirects to follow when scraping a URL until giving up? [closed]
I'm doing a "share box" where users can enter a link before posting and the app automatically scraps the URL to get a thumbnail and some other info. My question is: What would be a safe number of HTTP ...
3
votes
1answer
211 views
Is HTST (Strict-Transport-Security header) for HTTP or HTTPS?
Is the Strict-Transport-Security header intended for HTTP or HTTPS? What I mean is, do I respond with this header on a HTTP connection which in turn tells the browser to use HTTPS only from that point ...
4
votes
2answers
386 views
How to properly validate HTTP redirects?
I'm reading OWASP's Secure Coding Practices Checklist and under their "Input Validation" section they have an item that reads:
Validate data from redirects (An attacker may submit malicious ...
1
vote
1answer
171 views
How to determine whether the redirect link is secure or not?
I am checking about the security of redirect link, For the below link , how to determine whether it is secure?
For the first link, the users are not allowed to change the url in the browser, but they ...
2
votes
2answers
305 views
When is an intermediate page needed before directing a user off my primary website? What is the best implementation?
The NSA has a page that intercepts redirections off the primary site. (click "TLS: "Suite B Cipher Suites for TLS," RFC 5430" for an example).
I've seen this used in Exchange Outlook Web Access ...
