User bobince

2 votes

Malware Suddenly Uploaded To My Website!

answered Sep 16, 2013 at 20:42

2 votes

Accepted

XSS prevention for RESTful services

answered Sep 10, 2013 at 9:08

2 votes

What information can be seen from HTTPS to HTTP?

answered Sep 25, 2013 at 9:54

2 votes

File shares from a DMZ into an internal network

answered May 31, 2013 at 8:55

2 votes

Certificate authentication with jQuery's ajax() function

answered May 15, 2013 at 8:39

2 votes

Is there any good reason not to salt/hash passwords you store?

answered May 31, 2013 at 10:26

2 votes

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

answered Oct 6, 2014 at 20:06

2 votes

What are the security benefits of reset all fields if captcha was failed?

answered Dec 8, 2013 at 17:57

2 votes

Protecting <a href='{{ my_model.some_url }}'> in Django

answered Mar 4, 2014 at 12:42

2 votes

Is my user authentication method secure? Am I reinventing the wheel?

answered Mar 4, 2014 at 14:22

2 votes

Accepted

Increasing tomcat session id increases security

answered Mar 11, 2014 at 12:14

2 votes

non-https winscp website

answered Mar 21, 2015 at 13:19

2 votes

How secure credit card order system with blank mail

answered Nov 24, 2014 at 20:59

2 votes

Security of applications on .net platform

answered May 10, 2015 at 16:54

2 votes

Error message in Apache logs shows /bin/bash and wget

answered May 14, 2015 at 21:33

2 votes

IIS - RequestFiltering for #

answered Jun 16, 2015 at 11:43

1 vote

How to secure yourself against jQuery preventDefault phishing?

answered May 10, 2015 at 16:25

1 vote

Simpler idea for protection against reflected XSS on client side

answered Apr 17, 2014 at 12:05

1 vote

Accepted

Seeking help with implementing SCRAM in .NET

answered Dec 8, 2013 at 17:32

1 vote

Accepted

Will checking the CSRF token on the header and the form's hidden be enough?

answered Oct 9, 2014 at 18:19

1 vote

Session Fixation - Setting path to root without /

answered Aug 7, 2014 at 12:51

1 vote

PCI compliance and external resources http/https

answered Aug 7, 2014 at 13:33

1 vote

Accepted

Are input fields that don’t have name=“” sent via the browser

answered Aug 20, 2014 at 11:47

1 vote

Remote File Injection in ARGS blocking form updating database

answered Apr 23, 2013 at 22:21

1 vote

How is "security word" safe from man in the middle attack?

answered Nov 12, 2013 at 12:53

1 vote

Trust among the root-CAs

answered Jun 23, 2013 at 12:44

1 vote

Command injection Windows platform

answered Dec 28, 2012 at 23:00

1 vote

Why is it necessary to validate data in a servlet obtained by calling HttpSession.getAttribute()?

answered Nov 16, 2012 at 10:38

1 vote

sha512 as no-login-necessary token

answered Feb 6, 2012 at 8:04

1 vote

Accepted

Removing Google Analytics cookie string from URL - security hole?

answered Feb 16, 2012 at 13:25

Stack Exchange Network

159 Answers

Malware Suddenly Uploaded To My Website!

XSS prevention for RESTful services

What information can be seen from HTTPS to HTTP?

File shares from a DMZ into an internal network

Certificate authentication with jQuery's ajax() function

Is there any good reason not to salt/hash passwords you store?

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

What are the security benefits of reset all fields if captcha was failed?

Protecting <a href='{{ my_model.some_url }}'> in Django

Is my user authentication method secure? Am I reinventing the wheel?

Increasing tomcat session id increases security

non-https winscp website

How secure credit card order system with blank mail

Security of applications on .net platform

Error message in Apache logs shows /bin/bash and wget

IIS - RequestFiltering for #

How to secure yourself against jQuery preventDefault phishing?

Simpler idea for protection against reflected XSS on client side

Seeking help with implementing SCRAM in .NET

Will checking the CSRF token on the header and the form's hidden be enough?

Session Fixation - Setting path to root without /

PCI compliance and external resources http/https

Are input fields that don’t have name=“” sent via the browser

Remote File Injection in ARGS blocking form updating database

How is "security word" safe from man in the middle attack?

Trust among the root-CAs

Command injection Windows platform

Why is it necessary to validate data in a servlet obtained by calling HttpSession.getAttribute()?

sha512 as no-login-necessary token

Removing Google Analytics cookie string from URL - security hole?