New answers tagged

1

The problem isn't the WYSIWYG editor. They are clientside code. The problem with such editors is when they are integrated with the serverside to post content or perform an image upload. Much of the bad reputation comes from when they are included in a CMS plugin. Those integrate with the serverside code base and either aren't always coded securely or the ...


2

What you need to do is encrypt the file(s) before uploading it to the cloud provider, and decrypt them on download. Assumptions You do not want to cloud provider to by able to read (decrypt) these files. You would like something simple to implement Do This Use a symmetric algorithm to encrypt the files. The most common secure algorthm is AES There ...


-1

AES is available in any crypto library. Use AES. Or better than that, use a blackbox library like NaCl or libsodium with the defaults, which was designed by a top-notch cryptographer, meaning you don't have to worry about screwing up the implementation which you are indeed quite likely to do if you try and implement this yourself.


-1

The one that fulfills your requirements. If you just want to upload and download it, don't encrypt it. If you want to encrypt it because encryption sounds so cool, just XOR it with 01010101b. If you want to encrypt it to be secure, define what secure means for you. Do you want to prevent the cloud provider from automatically analyzing your file? Do you ...


0

Your need is just for storing the file in the cloud and assuming that the key will always be with you and only you. Here is the list of algorithms that you can use: Triple DES RSA Blowfish Twofish AES You can encrypt with anyone of these and upload them to cloud and for decryption, you will only be having the key.


0

You can use Chrome's Inspector to view the DOM tree as HTML. There you see the rendered result of the AngularJS processing. But provided that you use AngularJS correctly, it takes care of all escaping and won't allow any XSS vulnerabilities (otherwise they are vulnerabilities in AngularJS itself). You need to use $sce and ng-bind-html to make AngularJS ...


4

The user can modify and delete anything stored in their browser. Any malware installed in the user's system with the user's privilege can also do so. The system administrator can also modify and delete anything stored in any user's browser. Any malware with the administrator's privilege can do the same. Another non privileged user in the same system ...



Top 50 recent answers are included