Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with appsec
Search options not deleted
user 714
Application security - Specific to security concerns for an application that are independent from the underlying operating system, or surrounding infrastructure. Pertains to the design / architecture, source code, patching and maintenance cycle, or deployment and configuration of this software.
4
votes
Is AJAX fundamentally insecure?
OWASP has a good article on this subject. The major issue with AJAX being a wider attack surface, along with some attacks that are only realistically possible on AJAX applications (JSON hacks, or clie …
- 1,603
4
votes
2
answers
240
views
Changing windows client form values at runtime
I am performing a code audit of an older VB6 application which uses dynamically constructed SQL to execute against the database. While I see this as a SQL injection point, the developer contends that …
- 1,603
19
votes
2
answers
4k
views
The Creation of Secure Software Development Environments
[Edit] I did complete an analysis and framework of concepts
that were included into my thesis for extensions to existing frameworks. All of the information in this thread was useful. The direct link …
- 1,603
-1
votes
Safely changing text links to HTML anchors
Validate only that your own site is protected against XSS (by HTMLEncode() or other method prior to display) ... you can't do much for anyone elses.
Given the ability for mailicous types of people t …
- 1,603
5
votes
Is there a security risk running web apps in debug=“true”?
By allowing potential attackers potential access to source code, stack traces, etc. it certainly allows them to focus/narrow an attack to the system.
I'd also assume (though haven't tested it) that s …
- 1,603