New answers tagged appsec
0
votes
As long as an Android device does not get rooted, is it safe to assume that the main phone app has not been modified?
Yes if there is a vulnerability in the version of Android you are running, including a 0 day (undiscovered) vulnerability then that vulnerability can be exploited.
You can never say something was not ...
- 101
1
vote
Vary: origin response header and CORS exploitation
In the context of CORS requests, the “Vary: Origin” header is particularly important. When a browser makes a CORS request, it automatically adds an “Origin” header to indicate the source of the ...
- 11
Top 50 recent answers are included