Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community

Anybody can ask a question

Anybody can answer

The best answers are voted up and rise to the top

Explore our Questions

more tags

Active 4 Bountied Hot Week Month

1

vote

1

answer

26

views

XSS chained with CSRF = Stored XSS?

web-application xss csrf

answered 3 hours ago CBHacking 15.8k

3

votes

3

answers

310

views

Web Application Firewall using web app source code analysis

web-application firewalls static-analysis business-logic-attack

modified yesterday Community♦ 1

0

votes

2

answers

63

views

Why is it not possible to spoof referer and origin header with XHR?

web-application same-origin-policy header referer

answered 2 days ago wireghoul 4,617

14

votes

5

answers

4k

views

Should user input be validated for its length in PHP (server side) as a security measure?

web-application php

modified Dec 7 at 20:07 Frank Hopkins 291

0

votes

1

answer

2k

views

Session id remain same after and before logging in asp.net application

web-application asp.net

modified Dec 7 at 13:01 Community♦ 1

0

votes

1

answer

74

views

How to identify malicious Wordpress user agents

web-application malware apache wordpress

modified Dec 6 at 22:29 BadHorsie 143

5

votes

1

answer

140

views

What is the proper terminology and base CVSS score for the following cache related behaviour?

web-application web-browser webserver terminology caching

modified Dec 6 at 17:02 Community♦ 1

3

votes

5

answers

2k

views

Is it secure to use jQuery on the server-side for user input validation?

web-application javascript validation html

modified Dec 4 at 23:37 Toastrackenigma 621

1

vote

2

answers

49

views

Securing Client-Server Architecture with VPN or a SSL-connection?

tls web-application network vpn

modified Dec 4 at 23:37 guntbert 1,264

2

votes

3

answers

12k

views

How to bypass backslash escaping xss?

web-application xss javascript

answered Dec 4 at 14:53 Mhirsi Hamza 21

0

votes

0

answers

31

views

Is it a good practice to implement admin pages in a mobile application?

web-application mobile authorization administration

asked Dec 4 at 7:17 J.K 1

1

vote

3

answers

62

views

How do I configure Azure Web Apps so that the only access is via CloudFlare?

web-application azure cloudflare

modified Dec 4 at 3:33 CBHacking 15.8k

1

vote

4

answers

684

views

Security concerns surrounding HTTP GET in Web Development

web-application http

modified Dec 3 at 9:28 Eric O Lebigot 103

0

votes

2

answers

100

views

Best way to authorize and authenticate a user on web API

authentication web-application account-security authorization

answered Dec 2 at 12:01 MechMK1 16k

Browse more Questions

Information Security Stack Exchange works best with JavaScript enabled