Skip to content Skip to sidebar Skip to footer
Showing posts with the label Security

Secure Browser-side Cache In Local Storage

To make the question clear: is the proposal below considered 'secure'? (i.e. doesn't in… Read more Secure Browser-side Cache In Local Storage

Why Do Browsers Allow Onmousedown Js To Change Href?

I've noticed for a very long time that when you try to copy a link location or open a link on F… Read more Why Do Browsers Allow Onmousedown Js To Change Href?

How To Encrypt Data In Javascript And Decrypt In Php?

Is there any javascript function that can encrypt data: For example i want to use encrypted data in… Read more How To Encrypt Data In Javascript And Decrypt In Php?

Is Addslashes() Safe To Prevent Xss In A Html Attribute?

I'm having to work on an old web app that a previous developer left. It is using addslashes() t… Read more Is Addslashes() Safe To Prevent Xss In A Html Attribute?

Prevent User To Find Password Through Firebug/chrome Dev Tools

For the passport input field: When the Solution 1: Short answer: It can not be prevented, unfor… Read more Prevent User To Find Password Through Firebug/chrome Dev Tools

Unsafe Javascript Attempt To Access Frame In Google Chrome

Our web application (based on HTML5, SVG & JS) runs fine in all the browsers except Google Chro… Read more Unsafe Javascript Attempt To Access Frame In Google Chrome

How Can I Clean And Sanitize A Url Submitted By A User For Redisplay In Java?

I want a user to be able to submit a url, and then display that url to other users as a link. If I … Read more How Can I Clean And Sanitize A Url Submitted By A User For Redisplay In Java?

Security Considerations Using "new Function(...)" (during Rendertime, Expression Coming From My Javascript Sources)

I'd like to use new Function(...) to generate a function from very reduced code. I'l like t… Read more Security Considerations Using "new Function(...)" (during Rendertime, Expression Coming From My Javascript Sources)

Detecting Ssl Browser Support

How can you detect if the client browser has SSL support? I am not refering to the server Variables… Read more Detecting Ssl Browser Support

How To Secure/encode Javascript Post Requests

I've a game in which my JavaScript calls PHP scripts via POST to change values in the database.… Read more How To Secure/encode Javascript Post Requests

How To Securely Pass Data From Php Forms To Html

I have a login system which is an html form and I need to send the username and password back to th… Read more How To Securely Pass Data From Php Forms To Html

Guidance On Database Access Best Practices

I have recently inherited control of a web application (primarily PHP, but also a good chunk of Jav… Read more Guidance On Database Access Best Practices

Change Text To Dots In Text Field With Css/javascript

Is there a way to 'mask' the input of a text field to act like a password field (to show d… Read more Change Text To Dots In Text Field With Css/javascript

Meteor: Limiting Ddp Connections With Ddp-rate-limiter Package

I am trying to prevent a user to be able to call a Meteor method too often with the Meteor package … Read more Meteor: Limiting Ddp Connections With Ddp-rate-limiter Package

How Can I Mitigate Injection/exfiltration Attacks From Dynamic Property Accesses (i.e. Square Bracket Notation) In Javascript?

After setting up eslint-plugin-security, I went on to attempt to address nearly 400 uses of square … Read more How Can I Mitigate Injection/exfiltration Attacks From Dynamic Property Accesses (i.e. Square Bracket Notation) In Javascript?

How To Check Authenticity Of An Ajax Request

I am designing a web site in which users solve puzzles as quickly as they can. JavaScript is used t… Read more How To Check Authenticity Of An Ajax Request

Security Modifing App State From Javascript

I have a question about how to develop my web application security. Assuming that all the javascrip… Read more Security Modifing App State From Javascript

Established Javascript Solution For Secure Registration & Authentication Without Ssl

Is there any solution for secure user registration and authentication without SSL? With 'secur… Read more Established Javascript Solution For Secure Registration & Authentication Without Ssl

How Can I Validate/secure/authenticate A Javascript-based Post Request?

A product I'm helping to develop will basically work like this: A Web publisher creates a new … Read more How Can I Validate/secure/authenticate A Javascript-based Post Request?

Security Fix For Window.location.href

I have the below js code var a = window.location.href.substring(0,window.location.href.lastIndex(&#… Read more Security Fix For Window.location.href