1 vote

is <script>javascript:alert(document.domain); a valid script for xss?

The correct syntax will look something like this <script>alert(document.domain)</script> , since if you do not close the script tag your script will continue to pickup anything that is ...
Aleks4920's user avatar
1 vote

Securely storing derived key in web app and handling user identity

With regard to (1): See Need some clarification regards end-to-end encryption process for a few ideas around how to store users' private keys in a zero-knowledge web application. With regard to (2): ...
mti2935's user avatar
  • 23.4k

Only top scored, non community-wiki answers of a minimum length are eligible