Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

2 votes
1 answer
168 views

What are the security considerations for coding a website with interactive scripts but no backend?

0 votes
0 answers
42 views

Optimal way to securely store password on client with server invalidation but not knowledge

0 votes
1 answer
33 views

How to exploit a CORS that only checks the end of the Origin header?

0 votes
1 answer
302 views

Is it possible to protect browser credentials from malicious processes?

3 votes
1 answer
748 views

XSS chained with CSRF = Stored XSS?

0 votes
1 answer
17 views

How to properly migrate authentication cookies to using a new encryption scheme on a website while being backwards compatible?

1 vote
1 answer
78 views

Do web-hosting sites like Heroku or Railway expose your database?

0 votes
0 answers
34 views

Trying to generate TLS 1.3 Alert

1 vote
3 answers
698 views

What exactly are Hidden HTTP Parameters?

2 votes
3 answers
349 views

Reason to create fake accounts using real email addresses

1 vote
1 answer
217 views

Implications of accessing a web app via a VPN

0 votes
1 answer
457 views

XSS cookie Stealing with Character limitations

1 vote
1 answer
41 views

Is Web session required for app security?

1 vote
1 answer
266 views

Modsecurity CRS how to deal with field arrays

Browse more Questions