Skip to main content
bobince's user avatar
bobince's user avatar
bobince's user avatar
bobince
  • Member for 12 years, 5 months
  • Last seen more than a month ago
5 votes
Accepted

CSRF protection - 'back pages'

2 votes

BEAST mitigation on a Cisco ACE 4710 load balancer

4 votes
Accepted

Benefits of Content Security Policy

6 votes

What bad coding practices makes a browser extension vulnerable?

11 votes

Is there a way to bypass Django's XSS escaping with "unicode"?

3 votes

Decoding SMS in Chinese extracted from a Blackberry

3 votes

Prevent request forgery attack

4 votes

Why do browsers allow public websites to attack intranet sites?

12 votes
Accepted

What typically is the expiration date of a session cookie?

5 votes

Storing anti-CSRF token in cookie

11 votes
Accepted

Regedit shows strange chinese characters in my system - should I be worried?

0 votes

Does disabling right click have any impact on security?

8 votes

Why are iframes allowed at all in modern browsers?

2 votes
Accepted

How content-type:image can lead to infected JAR file?

15 votes
Accepted

How secure is this php code against SQL injection?

0 votes

Sucuri giving false positive with their free online scanner because of an .htaccess RewriteRule

7 votes

How to store banking information,collected on website, securely and implement encryption?

1 vote

Command injection Windows platform

11 votes
Accepted

What does scorecardsresearch.com/beacon.js - added by Disqus.com - do?

7 votes

Does any database let you disable non-parameterized queries and therefore disable SQL injection?

2 votes

PCI-DSS - one application per server?

6 votes
Accepted

SQL - using String concatenation, how can I exploit this procedure?

3 votes

Encoding HTML email content

1 vote

Why is it necessary to validate data in a servlet obtained by calling HttpSession.getAttribute()?

2 votes

SPF and Articles from News Sites

2 votes
Accepted

Does requiring users to fill out a PDF w/ CC information and mail it back violate PCI compliance?

6 votes
Accepted

Testing Web Application Firewall Configuration (ModSecurity)

4 votes

filtering content in Content disposition header

2 votes

What are some ways to steal a password/PIN using this system?

130 votes
Accepted

Why refresh CSRF token per form request?