Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 714

Application security - Specific to security concerns for an application that are independent from the underlying operating system, or surrounding infrastructure. Pertains to the design / architecture, source code, patching and maintenance cycle, or deployment and configuration of this software.

19 votes
2 answers
4k views

The Creation of Secure Software Development Environments

[Edit] I did complete an analysis and framework of concepts that were included into my thesis for extensions to existing frameworks. All of the information in this thread was useful. The direct link …
4 votes
2 answers
240 views

Changing windows client form values at runtime

I am performing a code audit of an older VB6 application which uses dynamically constructed SQL to execute against the database. While I see this as a SQL injection point, the developer contends that …
4 votes

Is AJAX fundamentally insecure?

OWASP has a good article on this subject. The major issue with AJAX being a wider attack surface, along with some attacks that are only realistically possible on AJAX applications (JSON hacks, or clie …
Mark Davidson's user avatar
-1 votes

Safely changing text links to HTML anchors

Validate only that your own site is protected against XSS (by HTMLEncode() or other method prior to display) ... you can't do much for anyone elses. Given the ability for mailicous types of people t …
Community's user avatar
  • 1
5 votes

Is there a security risk running web apps in debug=“true”?

By allowing potential attackers potential access to source code, stack traces, etc. it certainly allows them to focus/narrow an attack to the system. I'd also assume (though haven't tested it) that s …
iivel's user avatar
  • 1,603