Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community

Anybody can ask a question

Anybody can answer

The best answers are voted up and rise to the top

Explore our Questions

Ask Question

more tags

Active 2 Bountied Hot Week Month

0

votes

1

answer

44

views

What can a lfi without ssh open be used for

web-application lfi

answered 5 hours ago meik 66

0

votes

1

answer

70

views

Is there a way to check if my site visitor has visited another site?

web-application web-browser javascript

modified 20 hours ago Glorfindel 1,780

1

vote

0

answers

28

views

mORMot 1.18 doesn't invalidate session_signature after logout? is this the default behaviour?

web-application session-management token

asked yesterday Maicake 421

3

votes

1

answer

339

views

Does it make sense to have the application block users by IP as well as the firewalls?

authentication web-application php

answered 2 days ago Serge Ballesta 23k

1

vote

1

answer

45

views

Can an error page (like 404) served without X-Frame-Options be exploited?

web-application http

answered Feb 22 at 12:18 Steffen Ullrich 162k

1

vote

1

answer

185

views

Is this private network authentication system secure?

web-application appsec csrf oauth jwt

modified Feb 21 at 17:04 Community♦ 1

1

vote

1

answer

53

views

Shoul I consider <a href></a> as dangerous mixed passive content?

web-application mixed-content

answered Feb 21 at 15:45 Steffen Ullrich 162k

0

votes

1

answer

46

views

Storing Client Data for next page?

web-application web-browser web

answered Feb 20 at 12:47 CBHacking 24.5k

1

vote

1

answer

64

views

How to protect client server app if both: client and server - located on client side?

web-application php react

answered Feb 19 at 15:07 nomiko 1

2

votes

3

answers

71

views

LFI php://input returning initial argument?

web-application file-upload remote-code-execution lfi

answered Feb 19 at 14:46 nomiko 1

2

votes

2

answers

383

views

Exposed my browser cookie of my request header

authentication web-application cookies

modified Feb 19 at 9:25 Infra 247

13

votes

3

answers

569

views

Solution to the ‘Browser Crypto Chicken-and-Egg Problem’?

encryption web-application web-browser javascript protonmail

modified Feb 19 at 0:45 mti2935 11.9k

5

votes

1

answer

836

views

What is the preferred way of using AWS (specifically S3) from mobile apps?

web-application authentication mobile key-management authorization

answered Feb 18 at 23:16 Dave 1

0

votes

1

answer

27

views

JWT is being sent in cookies, but when I try for CSRF they are not sent

web-application appsec cookies csrf jwt

answered Feb 18 at 12:48 Sjoerd 27.4k

Browse more Questions

Information Security Stack Exchange works best with JavaScript enabled