Skip to main content
bobince's user avatar
bobince's user avatar
bobince's user avatar
bobince
  • Member for 12 years, 6 months
  • Last seen more than a month ago
9 votes
Accepted

Entering sensitive information into non-SSL site that uses secure iFrame

9 votes

Code Review on a Header Injection In Java : any help?

9 votes

Clickjacking: can't browsers just forbid/reject placing transparent elements over frames?

8 votes
Accepted

Using MySQL in .NET and other easily-decompiled languages?

8 votes

Why are iframes allowed at all in modern browsers?

8 votes
Accepted

Is a forced rewrite from http to https secure? What does SSLRequireSSL add?

8 votes

What are the security implications of the POLi Internet Payments technique?

8 votes
Accepted

Is it reasonable to keep control panel in separate subdomain or domain?

8 votes

Is my hashing method secure?

7 votes
Accepted

Have I done enough not be compromised through image uploading

7 votes
Accepted

How to ensure that files uploaded by users do not contain any XSS code

7 votes

Does any database let you disable non-parameterized queries and therefore disable SQL injection?

7 votes

How to store banking information,collected on website, securely and implement encryption?

7 votes
Accepted

Untrusted signature on java app for downloading youtube, harmful?

6 votes
Accepted

Is this JSON encoding vulnerable to CDATA injection?

6 votes

Malicious Script

6 votes

What bad coding practices makes a browser extension vulnerable?

6 votes
Accepted

SQL - using String concatenation, how can I exploit this procedure?

6 votes
Accepted

Testing Web Application Firewall Configuration (ModSecurity)

6 votes

How can hackers guess passwords (using dictionary attack or brute force) without being locked out?

6 votes
Accepted

Why does MySQLi using question marks (?) instead of the sprintf formatting?

6 votes

What kind of software can be used to remove Rootkit.Sirefef.Gen?

6 votes

Difference Between MD4 and MD5 encryption

6 votes
Accepted

How to execute an XSS attack against a site that uses client side protection?

5 votes

Is Django's built-in CSRF protection enough?

5 votes
Accepted

Exploiting XSS with window.name without iFrame

5 votes

CSRF Token in GET request

5 votes

Storing anti-CSRF token in cookie

5 votes
Accepted

CSRF protection - 'back pages'

5 votes
Accepted

Bypassing Web Application input validation