Questions tagged [security]

28

votes

5

answers

XSS attack to bypass htmlspecialchars() function in value attribute

php xss security

asked 2010-05-24T02:35:57.573

101

votes

11

answers

What are best practices for securing the admin section of a website?

security authentication

asked 2010-05-17T10:06:25.763

18

votes

6

answers

Secure C# Assemblies from unauthorized Callers

c# security assemblies

asked 2010-05-10T22:17:24.737

13

votes

4

answers

What's the best way to store sensitive data in MySQL?

php mysql security encryption cryptography

asked 2010-05-09T13:07:13.240

14

votes

2

answers

Correct way to safely store token/secret/etc from OAuth?

ruby database security oauth

asked 2010-05-03T21:48:57.243

130

votes

15

answers

Why not use HTTPS for everything?

security https

asked 2010-04-30T16:24:10.763

29

votes

4

answers

Why don't stacks grow upwards (for security)?

security architecture x86 stack cpu

asked 2010-04-30T12:35:31.297

9

votes

3

answers

Should I convert overlong UTF-8 strings to their shortest normal form?

perl security encoding utf-8

asked 2010-04-30T10:54:08.870

4508

votes

8

answers

Why does Google prepend while(1); to their JSON responses?

javascript json ajax security

asked 2010-04-19T18:00:09.750

70

votes

3

answers

How can I hash passwords in postgresql?

security postgresql hash cryptography salt-cryptography

asked 2010-04-15T16:30:42.687

51

votes

4

answers

Is there a way to load a different cacerts than the one specified in the java_home/jre/lib/security folder?

java security ssl jsse

asked 2010-04-15T00:58:31.257

13

votes

9

answers

Are there any differences between SQL Server and MySQL when it comes to preventing SQL injection?

php sql sql-server security sql-injection

asked 2010-04-09T15:37:08.517

43

votes

5

answers

Understanding CSRF

security session csrf

asked 2010-04-05T22:10:13.633

54

votes

2

answers

How to make Authorize attribute return custom 403 error page instead of redirecting to the Logon page

c# .net asp.net-mvc security authorization

asked 2010-04-05T14:04:33.780

27

votes

4

answers

Why is python decode replacing more than the invalid bytes from an encoded string?

python security unicode screen-scraping

asked 2010-03-30T17:33:46.723

20

votes

1

answers

Mixing secure & unsecure channels

c# .net security remoting

asked 2010-03-30T11:17:52.120

10

votes

5

answers

How to make a secure game in javascript?

php javascript security

asked 2010-03-30T08:48:14.397

29

votes

1

answers

WCF NetTcpBinding Security - how does it work?

wcf security credentials binding nettcpbinding

asked 2010-03-29T08:11:00.333

31

votes

5

answers

Can some hacker steal a web browser cookie from a user and login with that name on a web site?

asp.net security cookies forms-authentication

asked 2010-03-23T09:09:54.570

11

votes

1

answers

Best practices for storing secret keys

c# security cryptography

asked 2010-03-10T14:43:56.417

11

votes

3

answers

Write-only collections in MongoDB

mongodb security logging insert nosql

asked 2010-03-08T19:37:51.067

23

votes

1

answers

Am I under risk of CSRF attacks in a POST form that doesn't require the user to be logged in?

security csrf

asked 2010-03-07T20:59:23.820

12

votes

3

answers

Detect when iframe is cross-domain, then bust out of it

javascript security iframe cross-domain

asked 2010-03-02T18:54:59.407

18

votes

6

answers

Is it advisable to store a hashed password in a cookie?

security encryption cookies hash

asked 2010-03-02T04:13:24.007

17

votes

2

answers

Difference between processes running in kernel mode and running as root?

security process operating-system kernel usermode

asked 2010-03-01T05:57:57.873

9

votes

5

answers

Merge trunk into branch with SVN: "Secure Connection Truncated"

svn merge connection security truncated

asked 2010-02-24T06:46:40.673

24

votes

5

answers

How to configure database permissions for a Django app?

database django security permissions

asked 2010-02-24T00:06:14.933

41

votes

5

answers

How do I serve up an Unauthorized page when a user is not in the Authorized Roles?

c# asp.net-mvc security roles

asked 2010-02-23T22:50:10.700

12

votes

4

answers

Storing important secret keys in php files

php security

asked 2010-02-22T14:34:53.157

24

votes

14

answers

What is safer? Should I send an email with a URL that expires to users to reset their password or should I email a newly generated password?

security passwords reset-password

asked 2010-02-16T23:16:18.583

15

votes

2

answers

Security of scala runtime

security scala jvm runtime robocode

asked 2010-02-14T22:05:49.563

10

votes

4

answers

How to run a PowerShell script from C# as non-elevated user

c# security powershell powershell-2.0

asked 2010-02-13T03:58:10.283

10

votes

4

answers

CSRF protection by storing nonce in Session variable and form

security csrf

asked 2010-02-12T07:36:55.710

43

votes

11

answers

Is it possible to reverse a SHA-1 hash?

security sha1

asked 2010-02-10T07:22:20.620

42

votes

4

answers

When should AccessController.doPrivileged() be used?

java security

asked 2010-02-10T01:15:00.917

15

votes

6

answers

Building an ASP.NET MVC Master Page Menu Dynamically, Based on the current User's "Role"

c# .net asp.net asp.net-mvc security

asked 2010-02-04T21:23:18.287

20

votes

5

answers

How can I protect the content of public/ in a Rails app

ruby-on-rails ruby security

asked 2010-01-26T22:50:41.797

12

votes

5

answers

Read file:// URLs in IE XMLHttpRequest

ajax security file internet-explorer file-uri

asked 2010-01-26T19:52:38.593

12

votes

5

answers

What security considerations / concerns should be addressed when using CDN hosted code?

jquery security cdn

asked 2010-01-21T21:52:34.773

14

votes

3

answers

Why does OpenProcessToken fail with ERROR_ACCESS_DENIED

c security winapi

asked 2010-01-15T17:33:41.257

27

votes

7

answers

Who should own the private key used to sign a .NET assembly when its project is open-source?

c# .net security open-source

asked 2010-01-07T15:51:41.450

62

votes

11

answers

How to send password securely via HTTP using Javascript in absence of HTTPS?

security http hash password-protection hmac

asked 2010-01-05T00:07:29.150

29

votes

6

answers

How to secure Jetty to only allow access from loopback(localhost)

security jetty localhost

asked 2009-12-23T21:35:48.133

10

votes

4

answers

How Big a Security Risk are Browser Extensions?

security browser privacy malware

asked 2009-12-21T19:02:24.507

32

votes

10

answers

Do java's Inner classes pose a security risk?

java security inner-classes

asked 2009-12-20T10:32:31.970

145

votes

14

answers

OAuth secrets in mobile apps

iphone android security mobile oauth

asked 2009-12-19T21:24:08.137

35

votes

5

answers

How to Secure CouchDB

security couchdb restful-authentication

asked 2009-12-17T17:35:49.643

25

votes

5

answers

How to suppress "This page is accessing information not under its control"

web-services security internet-explorer

asked 2009-12-11T20:11:54.533

14

votes

5

answers

Changing parent window's URL from IFrame

javascript html security iframe

asked 2009-12-07T14:57:48.893

9

votes

1

answers

Is basic auth with SSL secure enough?

security ssl basic-authentication http-authentication

asked 2009-12-03T04:23:58.400

Questions tagged security