Reputation
34,600
Next tag badge:
86/100 score
20/20 answers
Badges
5 55 135
Newest
 Nice Answer
Impact
~2.0m people reached

12h
awarded  Nice Answer
Jan
22
awarded  Enlightened
Jan
22
awarded  Nice Answer
Jan
12
awarded  Famous Question
Jan
7
awarded  Yearling
Jan
6
awarded  Good Answer
Dec
29
awarded  Nice Answer
Dec
27
awarded  Nice Answer
Nov
29
awarded  Nice Answer
Nov
23
awarded  Popular Question
Nov
17
awarded  Favorite Question
Nov
10
awarded  Good Answer
Nov
3
awarded  csrf
Oct
9
comment Anti-CSRF mechanism with referer header
@pllee the PHP snip does not call exit() if the http_referer is absent. Although the referer cannot be changed, it is trivial to omit using a meta referer policy.
Oct
9
revised Anti-CSRF mechanism with referer header
added 59 characters in body
Oct
3
revised External cross domain include script
added 100 characters in body
Oct
3
comment External cross domain include script
@jcalfee314 unfortunately some assessments are conducted analysts who are blindly reporting BURP scanner findings XD. Context is important, and CDNs are fundamental requirement for scalable webapps. CDNs aren't perfect, and i recently hacked a major Akamai product...
Oct
1
awarded  Revival
Sep
26
awarded  Popular Question
Sep
22
comment Why no support for TCP Sockets in JavaScript
Consider researching the same-origin policy. Voting to close.