Linked Questions
14 questions linked to/from Does X-Content-Type-Options really prevent content sniffing attacks?
154
votes
4
answers
28k
views
Which security measures make sense for a static web site?
I have a static web site. Users cannot log in or perform any other actions. Which of the common HTTP security measures make sense for my site?
Do I need any of these?
HTTPS
Strict transport security
...
- 32.8k
34
votes
5
answers
17k
views
What are the security risks of letting the users upload content to my site?
As a web designer (not a security expert) I wonder: If I allow users to upload content to my website (videos, images and text files), what are the real risks involved?
- 675
30
votes
3
answers
19k
views
How can I be protected from pictures vulnerabilities?
I've just read this question What is the corrupted image vulnerability? How does it work?
(GIFAR, EXIF data with javascript, etc..)
I'm asking myself how can I protect myself and my website's users.
...
- 403
22
votes
4
answers
14k
views
Is it safe to serve any user uploaded file under only white-listed MIME content types?
Let's say I develop an application that,
Allows any user to upload a file of only white listed mime content type and extensions (word and pdf).
Serves those files with the allowed extension and ...
- 535
20
votes
4
answers
4k
views
Is it safe to store and replay user-provided mime types?
If a user uploads a file but modifies the request by setting the mime-type to something arbitrary, like "superdangerous/blackhatstuff", is it safe for me to send the same mime type back to a different ...
- 1,942
17
votes
3
answers
8k
views
Using file extension and MIME type (as output by file -i -b) combination to determine unsafe files?
We allow users to upload a number of files, all of which we either send over to scribd (doc, xls, ppts, etc) or display as a video ourselves (flv, mov, mp4, etc in flowplayer).
To avoid users ...
- 1,087
14
votes
3
answers
26k
views
Is it possible to inject HTML into image to provoke XSS?
Some answers mention that it's possible to inject attacker-controlled HTML into images and therefore provoke XSS.
I guess that this HTML will be processed by browser only if hole exists in browser. ...
- 5,457
27
votes
2
answers
9k
views
Guidance for implementors of HTTPS-only sites (Server side)
The recent trend in HTTPS attacks is to attack the HTTP protocol. What should I do to increase my site's security if the only protocol I want is HTTPS?
Some easy to implement ideas are
Implement ...
- 51k
10
votes
2
answers
4k
views
Why should I restrict the content type of files be uploaded to my site?
We are building an application where users can upload resumes in our system for our administrators to download. We are having a debate about restricting the content type of the files that can be ...
- 535
9
votes
2
answers
3k
views
MIME sniffing protection
As it is known, older versions of MSIE (before 8) have a nasty habit of treating images as HTML if they "look like" HTML, which can lead to nasty vulnerabilities for sites that allow people to upload ...
- 1,921
2
votes
4
answers
3k
views
Security risks of hosting user-supplied images?
I have a program that will accept and fetch images from urls. It will check if the extension is .png, .jpg, etc...
I will fetch these files and store them, they will be shown to users in a gallery (...
- 54.6k
4
votes
3
answers
2k
views
Flash ignores Content-Type header, allowing XSS?
I recently read that the Flash plugin ignores the Content-Type header in certain circumstances. In particular, you can give Flash a URL, and the Flash plugin will happily fetch the content at that ...
- 100k
1
vote
2
answers
1k
views
How to make this script run from image?
I'm testing my application for security vulnerabilities. I've inserted javascript in a gif and uploaded it into the application. The application loads the image in <img> tag. The script gets ...
- 21
2
votes
1
answer
662
views
How confident is MIME blacklisting on a proxy server?
We are blacklisting a number of MIME types on our proxy server so users can't download certain file types, for example, executables.
Could it be possible that somehow, a malicious server can trick a ...
- 23