Skip to main content
postoronnim's user avatar
postoronnim's user avatar
postoronnim's user avatar
postoronnim
  • Member for 7 years, 4 months
  • Last seen this week
  • USA
8 votes
6 answers
3k views

Does having no 'if' blocks in code mitigate side-channel attacks?

5 votes
2 answers
2k views

Are files like favicon.ico, robots.txt, and sitemap.xml vulnerable to XSS?

2 votes
2 answers
2k views

Why do we need CSRF controls if session ID is used?

1 vote
1 answer
102 views

Is Web session required for app security?

0 votes
0 answers
198 views

Web app vulnerability scanning: how many URLs to check?

0 votes
1 answer
277 views

Implementing generic login for Zap

0 votes
0 answers
24 views

Password checking implementation: delay on unsuccessful attempts [duplicate]

0 votes
1 answer
258 views

Why is the Web so complicated? [closed]

0 votes
1 answer
252 views

Can Zap scan a web app launched as a JAVA applet?

0 votes
1 answer
659 views

How do browsers detect authentication type?

0 votes
1 answer
174 views

Zap API: endpoints unavailable