Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
Information Security

Explore our questions

Ask Question
more tags
Active Hot Week Month
2 votes
1 answer
168 views

What are the security considerations for coding a website with interactive scripts but no backend?

Community's user avatar
CommunityBot
  • 1
0 votes
0 answers
42 views

Optimal way to securely store password on client with server invalidation but not knowledge

InterLinked's user avatar
InterLinked
  • 121
0 votes
1 answer
33 views

How to exploit a CORS that only checks the end of the Origin header?

zajic's user avatar
zajic
  • 11
0 votes
1 answer
302 views

Is it possible to protect browser credentials from malicious processes?

Community's user avatar
CommunityBot
  • 1
3 votes
1 answer
748 views

XSS chained with CSRF = Stored XSS?

Community's user avatar
CommunityBot
  • 1
0 votes
1 answer
17 views

How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?

CBHacking's user avatar
CBHacking
  • 45.4k
1 vote
1 answer
78 views

Do web-hosting sites like Heroku or Railway expose your database?

Community's user avatar
CommunityBot
  • 1
0 votes
0 answers
34 views

Trying to generate TLS 1.3 Alert

UndercoverDog's user avatar
UndercoverDog
  • 939
1 vote
3 answers
698 views

What exactly are Hidden HTTP Parameters?

Community's user avatar
CommunityBot
  • 1
2 votes
3 answers
349 views

Reason to create fake accounts using real email addresses

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
217 views

Implications of accessing a web app via a VPN

Community's user avatar
CommunityBot
  • 1
0 votes
1 answer
457 views

XSS cookie Stealing with Character limitations

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
41 views

Is Web session required for app security?

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
266 views

Modsecurity CRS how to deal with field arrays

Community's user avatar
CommunityBot
  • 1
Browse more Questions

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.