Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community

Anybody can ask a question

Anybody can answer

The best answers are voted up and rise to the top

Explore our Questions

Ask Question

more tags

Active Hot Week Month

-1

votes

0

answers

6

views

How to take advantage of a new security tool (SCA) added to company?

web-application appsec vulnerability attack-prevention

asked 50 mins ago lea43 1

4

votes

3

answers

418

views

Web Application Firewall using web app source code analysis

web-application firewalls static-analysis business-logic-attack

modified yesterday CommunityBot 1

1

vote

1

answer

45

views

Is it safe to view video files on Google Drive online?

web-application malware google-apps

modified Nov 24 at 21:30 schroeder♦ 120k

2

votes

1

answer

118

views

Content-Secure-Policy headers

web-application web content-security-policy header

modified Nov 24 at 18:08 CommunityBot 1

0

votes

0

answers

33

views

How to protect a web app against supply chain attacks?

web-application appsec opensource third-party

modified Nov 24 at 16:34 floflo 1

4

votes

2

answers

874

views

Why do we use CORS?

web-application cors

answered Nov 24 at 15:57 akostadinov 517

1

vote

1

answer

122

views

What is the recommended way to generate API tokens using Laravel framework?

authentication web-application php mobile api

modified Nov 23 at 22:07 CommunityBot 1

3

votes

3

answers

15k

views

Cross site scripting prevention removing &lt and &gt

web-application xss

modified Nov 23 at 14:48 itachi 1

0

votes

1

answer

100

views

XSS in <span> where only < and > are encoded

web-application xss

modified Nov 18 at 22:05 CommunityBot 1

0

votes

0

answers

23

views

cookie forging: How to replace session cookies

web-application penetration-test cookies

asked Nov 18 at 20:14 R4444 101

1

vote

2

answers

115

views

How to protect client server app if both: client and server - located on client side?

web-application php react

answered Nov 17 at 18:58 CBHacking 33.9k

14

votes

5

answers

10k

views

Is username enumeration practical when the username is an email address?

web-application enumeration user-enumeration

answered Nov 16 at 10:30 Bruno Rohée 4,067

5

votes

1

answer

891

views

What is the preferred way of using AWS (specifically S3) from mobile apps?

web-application authentication mobile key-management authorization

modified Nov 16 at 1:03 CommunityBot 1

0

votes

1

answer

130

views

How to secure Laravel website against the ongoing massive exploitation

web-application php breach incident-analysis laravel

modified Nov 14 at 15:03 CommunityBot 1

Browse more Questions

Information Security Stack Exchange works best with JavaScript enabled