Information Security Stack Exchange

2 votes

3 answers

285 views

Is checking against password lists a good way to enforce a secure password policy and possibly detect dictionary attacks on a web-based app?

Jens Bannmann

143

modified 7 hours ago

4 votes

2 answers

1k views

RESTful web application security and authentication scheme

Securing

31

answered 8 hours ago

2 votes

4 answers

3k views

Are there any web application security standards?

Securing

31

answered 8 hours ago

1 vote

1 answer

25 views

Vulnerabilities in Build-time Libraries Could be a Security Threat

CBHacking

40.4k

answered 21 hours ago

1 vote

1 answer

116 views

Can the Origin header have alphabetical port or parameters in a real-life scenario?

CommunityBot

1

modified yesterday

1 vote

1 answer

291 views

Is `SecAction` order important for an OWASP ModSecurity config file?

user283584

41

answered 2 days ago

5 votes

1 answer

6k views

XSS not exploitable when POST data is sent in JSON?

user283548

1

modified 2 days ago

9 votes

2 answers

5k views

Is it secure to share an access token via HTML5 messaging API between various iframes?

Hamid Mosalla

103

modified Sep 30 at 20:19

1 vote

1 answer

63 views

How to collect malicious URLs

schroeder♦

124k

modified Sep 30 at 13:40

1 vote

0 answers

30 views

Why "application/x-www-form-urlencoded" is normally used for login but not for registration?

schroeder♦

124k

modified Sep 30 at 7:18

0 votes

1 answer

246 views

Is it possible to protect browser credentials from malicious processes?

CommunityBot

1

modified Sep 29 at 11:06

1 vote

0 answers

28 views

SQL injection into IN('[injection]') without parentheses or comma

tim

29.1k

modified Sep 29 at 10:06

0 votes

1 answer

50 views

When to use application layer encryption

Steffen Ullrich

185k

answered Sep 28 at 18:55

1 vote

0 answers

20 views

Presenting users their API Keys on frontend

hubfix

11

asked Sep 28 at 15:09

Stack Exchange Network

Explore our questions

Is checking against password lists a good way to enforce a secure password policy and possibly detect dictionary attacks on a web-based app?

RESTful web application security and authentication scheme

Are there any web application security standards?

Vulnerabilities in Build-time Libraries Could be a Security Threat

Can the Origin header have alphabetical port or parameters in a real-life scenario?

Is `SecAction` order important for an OWASP ModSecurity config file?

XSS not exploitable when POST data is sent in JSON?

Is it secure to share an access token via HTML5 messaging API between various iframes?

How to collect malicious URLs

Why "application/x-www-form-urlencoded" is normally used for login but not for registration?

Is it possible to protect browser credentials from malicious processes?

SQL injection into IN('[injection]') without parentheses or comma

When to use application layer encryption

Presenting users their API Keys on frontend

Hot Network Questions