Tagged Questions
1
vote
3answers
129 views
Implication of URL injection in an URL shortener service
EDIT There have been upvotes retracted or downvotes due to, I think, a serious misunderstanding of my question. In the following I'm not concerned about the URL leading to a site containing malware ...
-1
votes
2answers
146 views
What are the security advantage of new redirecting method used by Gmail and Facebook?
When clicking on the any link in gmail or Facebook,it redirect to that link by some other ways.
What are the security advantage of new redirecting method used by gmail and Facebook?
2
votes
2answers
304 views
When is an intermediate page needed before directing a user off my primary website? What is the best implementation?
The NSA has a page that intercepts redirections off the primary site. (click "TLS: "Suite B Cipher Suites for TLS," RFC 5430" for an example).
I've seen this used in Exchange Outlook Web Access ...
3
votes
2answers
2k views
Testing clean urls with sqlmap
Is it possible to test for SQL injection vulnerabilities with using sqlmap with a url that is using mod rewrite (or something like it) to make the urls clean?
I know how to test my sites that have ...
6
votes
3answers
175 views
Defending site against being abused by phishing
Say you have a web site and you are using some returnUrl URL parameter to redirect user back to page where he was after login or editing some records in user area. Is there some standard way how to ...
