Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

2 votes
3 answers
285 views

Is checking against password lists a good way to enforce a secure password policy and possibly detect dictionary attacks on a web-based app?

4 votes
2 answers
1k views

RESTful web application security and authentication scheme

2 votes
4 answers
3k views

Are there any web application security standards?

1 vote
1 answer
25 views

Vulnerabilities in Build-time Libraries Could be a Security Threat

1 vote
1 answer
116 views

Can the Origin header have alphabetical port or parameters in a real-life scenario?

1 vote
1 answer
291 views

Is `SecAction` order important for an OWASP ModSecurity config file?

5 votes
1 answer
6k views

XSS not exploitable when POST data is sent in JSON?

9 votes
2 answers
5k views

Is it secure to share an access token via HTML5 messaging API between various iframes?

1 vote
1 answer
63 views

How to collect malicious URLs

1 vote
0 answers
30 views

Why "application/x-www-form-urlencoded" is normally used for login but not for registration?

0 votes
1 answer
246 views

Is it possible to protect browser credentials from malicious processes?

1 vote
0 answers
28 views

SQL injection into IN('[injection]') without parentheses or comma

0 votes
1 answer
50 views

When to use application layer encryption

1 vote
0 answers
20 views

Presenting users their API Keys on frontend

Browse more Questions