User PenGeek

2 votes

1 answer

997 views

What is the risk of committing .npmrc file and exposing to the world?

asked Mar 14, 2022 at 17:09

2 votes

1 answer

2k views

How to prevent JSONP injection?

asked Sep 20, 2017 at 3:49

4 votes

1 answer

492 views

XSS - will javascript execute in anchor tag where "/" by default added by server in href

asked Aug 11, 2016 at 6:00

-2 votes

1 answer

783 views

Does browser by default support autocomplete "off" for password field? [closed]

asked Nov 27, 2017 at 7:58

0 votes

1 answer

149 views

How to capture HTTP Traffic if the application uses Automatic Configuration Script?

asked Oct 19, 2017 at 10:24

4 votes

1 answer

3k views

Is JSON Hijacking different than JSONP injection?

asked Sep 19, 2017 at 18:34

1 vote

0 answers

2k views

Is it possible to do CSRF for POST request with an XML body

asked Aug 10, 2017 at 12:25

1 vote

1 answer

598 views

Is it possible to read the response of HTTP request without XHR?

asked Aug 3, 2017 at 8:37

2 votes

2 answers

3k views

JavaScript resource files are available without authentication - is this a security risk?

asked Oct 20, 2016 at 12:01

4 votes

1 answer

2k views

Is browser memory cache considered as security issue?

asked Sep 8, 2016 at 7:25

Stack Exchange Network

10 Questions

What is the risk of committing .npmrc file and exposing to the world?

How to prevent JSONP injection?

XSS - will javascript execute in anchor tag where "/" by default added by server in href

Does browser by default support autocomplete "off" for password field? [closed]

How to capture HTTP Traffic if the application uses Automatic Configuration Script?

Is JSON Hijacking different than JSONP injection?

Is it possible to do CSRF for POST request with an XML body

Is it possible to read the response of HTTP request without XHR?

JavaScript resource files are available without authentication - is this a security risk?

Is browser memory cache considered as security issue?