postoronnim's user avatar
postoronnim's user avatar
postoronnim's user avatar
postoronnim
  • Member for 7 years, 1 month
  • Last seen this week
  • USA
8 votes
6 answers
3k views

Does having no 'if' blocks in code mitigate side-channel attacks?

5 votes
2 answers
2k views

Are files like favicon.ico, robots.txt, and sitemap.xml vulnerable to XSS?

2 votes
2 answers
1k views

Why do we need CSRF controls if session ID is used?

1 vote
1 answer
81 views

Is Web session required for app security?

0 votes
1 answer
163 views

Web app vulnerability scanning: how many URLs to check?

0 votes
1 answer
264 views

Implementing generic login for Zap

0 votes
0 answers
24 views

Password checking implementation: delay on unsuccessful attempts [duplicate]

0 votes
1 answer
246 views

Why is the Web so complicated? [closed]

0 votes
1 answer
238 views

Can Zap scan a web app launched as a JAVA applet?

0 votes
1 answer
600 views

How do browsers detect authentication type?

0 votes
1 answer
160 views

Zap API: endpoints unavailable