Erlend's user avatar
Erlend's user avatar
Erlend's user avatar
Erlend
  • Member for 13 years, 5 months
  • Last seen more than 3 years ago
103 votes

How can I explain SQL injection without technical jargon?

29 votes
Accepted

How does basic HTTP Auth work?

9 votes
Accepted

How can I execute a XSS when a web application transforms a data from lowercase to uppercase?

4 votes
Accepted

exploiting XSS in jQuery selector

4 votes

Is strip_tags() horribly unsafe?

4 votes

Why doesn't the same origin policy block get requests that contain arguments?

4 votes

Is SSL a mitigating factor for HTTPonly not set on cookies?

3 votes
Accepted

Tracing security policy permissions in JavaScript

3 votes

What is the danger of Reflected Cross Site Scripting?

2 votes

How can I prevent reflected XSS in my JSON web services?

2 votes
Accepted

I need explanation on how serious these vulnerabilities are?

2 votes

Is it possible to see if a script on a website steals session cookies?

2 votes

Is this filter safe enough to mitigate XSS?

2 votes

Could someone steal all stored cookies with an XSS attack?

1 vote
Accepted

DOMXSS - Is Input Field Content an Attack Vector?

1 vote

For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?

1 vote

Bottleneck while creating XSS scanner for a website which returns API response instead of HTML

0 votes

Any way to bypass this xss filter?

0 votes

Can XSS vulnerabilities present in 3rd party js libraries be used to attack the app that uses the lib?

0 votes

Flash ignores Content-Type header, allowing XSS?