Skip to main content
Share Your Experience: Take the 2024 Developer Survey
bobince's user avatar
bobince's user avatar
bobince's user avatar
bobince
  • Member for 12 years, 5 months
  • Last seen more than a month ago
4 votes

How about preventing CSRF this way?

2 votes

What information can be seen from HTTPS to HTTP?

3 votes

Flash ignores Content-Type header, allowing XSS?

3 votes
Accepted

Calling JavaScript functions from within a Style tag XSS

2 votes

Malware Suddenly Uploaded To My Website!

2 votes
Accepted

XSS prevention for RESTful services

61 votes
Accepted

Is the Web browser status bar always trustable?

3 votes
Accepted

Need help deciphering malicious JS code

8 votes

What are the security implications of the POLi Internet Payments technique?

3 votes

Javascript containing a long hexadecimal string and eval: is this suspicious?

3 votes

Is there any reason I shouldn't use SHA1 of salt + website name + master password for my password in websites?

4 votes

Accessing keystrokes directed at iframe?

4 votes
Accepted

ASP.NET SQL Injection

7 votes
Accepted

How to ensure that files uploaded by users do not contain any XSS code

12 votes
Accepted

How to remove ssh rootkits?

29 votes

Is there a security reason for a site to limit the number of times a user can change their password?

15 votes
Accepted

Specific risks of embedding an HTTPS iframe in an HTTP page

1 vote

Trust among the root-CAs

5 votes

Storing credit card data on behalf of customers: and transfer the data later

14 votes
Accepted

Unknown Asian/Chinese registry keys

2 votes

Is there any good reason not to salt/hash passwords you store?

21 votes
Accepted

Why does this XSS vector work in svg but not in HTML?

5 votes

CSRF Token in GET request

2 votes

File shares from a DMZ into an internal network

3 votes

Is cookie-based XSS exploitable?

2 votes

Certificate authentication with jQuery's ajax() function

0 votes

What are the security risks of pirating video or music?

17 votes

Is showing your IP address in the URL a bad practice?

1 vote

Remote File Injection in ARGS blocking form updating database

5 votes
Accepted

Bypassing Web Application input validation