User bobince

5 votes

Storing credit card data on behalf of customers: and transfer the data later

answered Jun 22, 2013 at 18:53

5 votes

Accepted

Risks of serving untrusted content under HTTP Content-Type: text/plain?

answered Jun 22, 2012 at 8:30

5 votes

How can I prevent reflected XSS in my JSON web services?

answered Sep 20, 2012 at 9:07

5 votes

Accepted

How does a trojan like Trojan:JS/BlacoleRef.BV infect a website?

answered Jul 14, 2012 at 11:04

5 votes

Are Three attempts to block login a good idea?

answered Mar 30, 2012 at 13:29

5 votes

Does setting the cookie-path protect me from XSS from another context?

answered Jun 12, 2012 at 10:01

5 votes

Accepted

Has my Mac been compromised?

answered Feb 27, 2012 at 8:59

4 votes

Accepted

What servers or clients are immune to related-domain cookie attacks? (*.example.com)

answered Mar 7, 2012 at 10:04

4 votes

Accepted

Why the servers stores hashed password instead of relaying on private/public key

answered Mar 17, 2012 at 14:56

4 votes

Accepted

Can a CSRF CAPTCHA be defeated?

answered Feb 16, 2012 at 0:17

4 votes

Is changing image's extension prone to error for browsers?

answered Dec 26, 2011 at 12:32

4 votes

filtering content in Content disposition header

answered Oct 30, 2012 at 10:05

4 votes

Accepted

Benefits of Content Security Policy

answered Apr 12, 2013 at 8:20

4 votes

Why do browsers allow public websites to attack intranet sites?

answered Apr 7, 2013 at 9:28

4 votes

How about preventing CSRF this way?

answered Oct 3, 2013 at 10:46

4 votes

Accepted

ASP.NET SQL Injection

answered Aug 6, 2013 at 23:05

4 votes

Accessing keystrokes directed at iframe?

answered Aug 8, 2013 at 12:23

4 votes

Faster SQL injection prevention

answered Sep 1, 2014 at 12:46

4 votes

Is PCI-DSS compliance required for non-credit card payment source?

answered Oct 9, 2014 at 9:13

4 votes

Accepted

Advantages of multiple valid CSRF tokens

answered Feb 9, 2014 at 23:52

4 votes

Accepted

Why browsers implement stricter policy for local files

answered Oct 24, 2014 at 13:36

4 votes

Is the convertomp3.com website hacked? :)

answered Jan 31, 2015 at 11:31

4 votes

Can CSRF protection work even if an XSS vulnerability exists?

answered Apr 11, 2016 at 21:20

3 votes

Accepted

Can F5's Big-IP ASM protect against CSRF for AJAX calls?

answered Jan 9, 2016 at 12:43

3 votes

Why there are so many web servers which get exploited by generating obfuscated files?

answered Mar 2, 2016 at 23:59

3 votes

Detecting malicious domains/URLs

answered Apr 3, 2015 at 13:44

3 votes

Accepted

Using classic ASP, is this the right way to do to protect against XSS?

answered Dec 8, 2014 at 15:10

3 votes

IIS 7 World Wide Web Publishing Service service account

answered Jan 18, 2015 at 14:13

3 votes

Windows Authentication and Session Ids

answered Dec 15, 2013 at 3:02

3 votes

Can unwanted software(like spyware) already present detect the user trying to install an antivirus software and go into hiding?

answered Sep 26, 2014 at 22:14

Stack Exchange Network

159 Answers

Storing credit card data on behalf of customers: and transfer the data later

Risks of serving untrusted content under HTTP Content-Type: text/plain?

How can I prevent reflected XSS in my JSON web services?

How does a trojan like Trojan:JS/BlacoleRef.BV infect a website?

Are Three attempts to block login a good idea?

Does setting the cookie-path protect me from XSS from another context?

Has my Mac been compromised?

What servers or clients are immune to related-domain cookie attacks? (*.example.com)

Why the servers stores hashed password instead of relaying on private/public key

Can a CSRF CAPTCHA be defeated?

Is changing image's extension prone to error for browsers?

filtering content in Content disposition header

Benefits of Content Security Policy

Why do browsers allow public websites to attack intranet sites?

How about preventing CSRF this way?

ASP.NET SQL Injection

Accessing keystrokes directed at iframe?

Faster SQL injection prevention

Is PCI-DSS compliance required for non-credit card payment source?

Advantages of multiple valid CSRF tokens

Why browsers implement stricter policy for local files

Is the convertomp3.com website hacked? :)

Can CSRF protection work even if an XSS vulnerability exists?

Can F5's Big-IP ASM protect against CSRF for AJAX calls?

Why there are so many web servers which get exploited by generating obfuscated files?

Detecting malicious domains/URLs

Using classic ASP, is this the right way to do to protect against XSS?

IIS 7 World Wide Web Publishing Service service account

Windows Authentication and Session Ids

Can unwanted software(like spyware) already present detect the user trying to install an antivirus software and go into hiding?