New answers tagged

3

I can think of following scenarios: Since you are processing your data and then carrying out a DB call, you should ensure that you used prepared statements in your webserver. That will take care of all your SQL Injection attacks If you are presenting the data on your webpage, then ensure you are sanitizing your input to prevent a Stored XSS attack. An ...


0

Proper input validation. I have seen many times that the applications handle special characters in the input fields very well except present in the data in the uploaded excel file. Make sure any error message that you show for invalid data in excel file should be a generic message and should not include unencoded cell value. Otherwise your app will be ...


3

Depends what you mean by "email service", since as a general rule you're using some client to access an email service, and clients have different capabilities and restrictions. For example, mobile clients (smartphones) usually provide some support for Mobile Device Management (MDM). While MDM doesn't often involve retrieving files from the device - it's ...



Top 50 recent answers are included