Reputation
1,264
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 12
Newest
 Yearling
Impact
~101k people reached

  • 0 posts edited
  • 0 helpful flags
  • 39 votes cast
Dec
21
answered How can I explain SQL injection without technical jargon?
Nov
29
answered I need explanation on how serious these vulnerabilities are?
Oct
6
comment How does Amazon bill me without the CVC / CVV / CVV2?
@GdD If you read the PCI DSS requirements it clearly states you are not allowed to store CVC/CVV/CVV2 codes. See page 8 pcisecuritystandards.org/documents/pci_dss_v2.pdf
Sep
21
answered How can I prevent reflected XSS in my JSON web services?
Sep
1
comment Current best practices to prevent persistent XSS attacks
The OWASP XSS Prevention cheat sheet and OWASP Abridged XSS prevention cheat sheet are probably worth mentioning: owasp.org/index.php/… owasp.org/index.php/Abridged_XSS_Prevention_Cheat_Sheet
Aug
28
answered What is the danger of Reflected Cross Site Scripting?
Jun
19
answered Why doesn't the same origin policy block get requests that contain arguments?
Mar
6
answered For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
Dec
23
answered Is strip_tags() horribly unsafe?
Nov
17
comment Server wide javascript injection
Sounds to me like the php interpreter has been modified. Maybe reinstall php, but make a copy of the php binary and send it to virustotal.com first.
Nov
11
awarded  Yearling
Sep
17
comment C# Encrypting string in DES 3 CBC mode
That's why a good encryption algorithms like AES takes an IV (initialization vector). The IV has many similarities with the salt when hashing passwords. It makes sure that even though you encrypt the same text, the cipher text becomes different (as long as you use a different IV of course)
Sep
17
answered Is it possible to see if a script on a website steals session cookies?
May
25
awarded  Nice Question
Apr
27
comment How do you make sure a pdf is deleted after being viewed in the browser?
Oh, sorry. My question is, is there anything I can do from the server side (headers etc.) to tell the browser/plugin to delete the pdf when the user navigates away from the pdf or closes the pdf reader?
Apr
27
asked How do you make sure a pdf is deleted after being viewed in the browser?
Dec
9
awarded  Precognitive
Dec
4
awarded  Critic
Nov
23
awarded  Teacher
Nov
23
answered How does basic HTTP Auth work?