Skip to main content
bobince's user avatar
bobince's user avatar
bobince's user avatar
bobince
  • Member for 12 years, 6 months
  • Last seen more than a month ago
2 votes
Accepted

How content-type:image can lead to infected JAR file?

2 votes

Malware Suddenly Uploaded To My Website!

2 votes
Accepted

XSS prevention for RESTful services

2 votes

What information can be seen from HTTPS to HTTP?

2 votes

File shares from a DMZ into an internal network

2 votes

Certificate authentication with jQuery's ajax() function

2 votes

Is there any good reason not to salt/hash passwords you store?

2 votes

How to implement password reset functionality without becoming susceptible to cross-domain referer leakage?

2 votes

What are the security benefits of reset all fields if captcha was failed?

2 votes

Protecting <a href='{{ my_model.some_url }}'> in Django

2 votes

Is my user authentication method secure? Am I reinventing the wheel?

2 votes
Accepted

Increasing tomcat session id increases security

2 votes

non-https winscp website

2 votes

How secure credit card order system with blank mail

2 votes

Security of applications on .net platform

2 votes

Error message in Apache logs shows /bin/bash and wget

2 votes

IIS - RequestFiltering for #

1 vote

How to secure yourself against jQuery preventDefault phishing?

1 vote

Simpler idea for protection against reflected XSS on client side

1 vote
Accepted

Seeking help with implementing SCRAM in .NET

1 vote
Accepted

Will checking the CSRF token on the header and the form's hidden be enough?

1 vote
Accepted

Are input fields that don’t have name=“” sent via the browser

1 vote

Session Fixation - Setting path to root without /

1 vote

PCI compliance and external resources http/https

1 vote

Remote File Injection in ARGS blocking form updating database

1 vote

How is "security word" safe from man in the middle attack?

1 vote

Trust among the root-CAs

1 vote

Command injection Windows platform

1 vote

Why is it necessary to validate data in a servlet obtained by calling HttpSession.getAttribute()?

1 vote

sha512 as no-login-necessary token