Alex Rivera | Logout

Questions tagged xss

44 questions

Sort by: Newest Votes Active
14
votes
3
answers

how to set httponly and session cookie for java web application

java security xss httponly
asked 2013-03-19T21:01:51.760
26
votes
1
answers

NS_ERROR_FAILURE : Failure in Firefox

javascript ajax firefox xmlhttprequest xss
asked 2013-03-15T21:02:34.867
17
votes
4
answers

Javascript XSS Prevention

javascript security node.js xss sanitization
asked 2012-10-09T11:58:07.900
21
votes
4
answers

How to access plain text content retrieved via <script type="text/plain" src=...> in JavaScript?

javascript text xss
asked 2012-10-06T14:53:48.103
10
votes
4
answers

What is the purpose of this JavaScript hack?

javascript security xss
asked 2012-02-28T08:49:35.323
236
votes
6
answers

What is the http-header "X-XSS-Protection"?

http http-headers xss
asked 2012-02-01T03:59:59.607
8
votes
2
answers

Why does HTML encoding prevent certain XSS attacks?

html xss
asked 2011-12-12T13:47:44.807
52
votes
3
answers

Is it safe to use $.support.cors = true; in jQuery?

jquery xss security
asked 2011-10-21T16:10:59.020
59
votes
3
answers

CSRF, XSS and SQL Injection attack prevention in JSF

jsf xss sql-injection csrf owasp
asked 2011-10-11T06:30:15.577
23
votes
4
answers

Examples of XSS that I can use to test my page input?

php javascript security xss
asked 2011-08-29T15:42:32.570
9
votes
3
answers

Does a reverse proxy make node.js safe?

security node.js cloud xss reverse-proxy
asked 2011-08-14T00:12:12.183
27
votes
1
answers

What makes JSFiddle secure from XSS based attacks?

javascript security xss jsfiddle
asked 2011-07-18T11:54:46.353
11
votes
4
answers

Attempted exploit?

javascript security unicode xss javascript-injection
asked 2011-03-01T10:46:09.370
16
votes
5
answers

The 2011 approach to XSS in PHP?

php security xss
asked 2011-02-21T20:49:51.127
9
votes
2
answers

Cakephp Security

security cakephp xss csrf xsl-fo
asked 2010-10-06T07:51:30.240
11
votes
1
answers

Html escaping in a Rails 3 view

ruby-on-rails ruby-on-rails-3 xss erb
asked 2010-08-26T09:39:42.927
10
votes
8
answers

Is it possible to sanitize Javascript code?

javascript xss
asked 2010-08-25T23:43:46.527
83
votes
2
answers

What are "top level JSON arrays" and why are they a security risk?

javascript json security xss
asked 2010-08-17T13:48:30.423
13
votes
5
answers

What is the correct way to encode an inline javascript object, in order to protect it from XSS?

javascript html json xss
asked 2010-08-16T00:25:43.967
24
votes
5
answers

Preventing HTML character entities in locale files from getting munged by Rails3 xss protection

html ruby-on-rails internationalization ruby-on-rails-3 xss
asked 2010-08-13T13:58:27.770
28
votes
5
answers

XSS attack to bypass htmlspecialchars() function in value attribute

php xss security
asked 2010-05-24T02:35:57.573
18
votes
4
answers

Do I need to sanitize the callback parameter from a JSONP call?

jsonp xss
asked 2010-05-05T21:46:08.323
24
votes
6
answers

Cross-Origin Resource Sharing (CORS) - am I missing something here?

javascript ajax xss xmlhttprequest cors
asked 2010-03-28T13:29:02.507
9
votes
7
answers

How does disqus work?

javascript ajax xss
asked 2010-03-10T07:43:32.087
15
votes
3
answers

Does HTML encoding prevent XSS security exploits?

xss escaping
asked 2010-02-25T14:53:34.343
64
votes
8
answers

How do I prevent people from doing XSS in Spring MVC?

spring jsp spring-mvc xss html-escape-characters
asked 2010-01-27T15:10:56.210
17
votes
2
answers

Is replacing : < and > with &lt; and &gt; enough to prevent XSS injection?

xss code-injection
asked 2010-01-22T00:06:43.967
11
votes
2
answers

What is the best way to handle user generated html content that will be viewed by the public?

html xss
asked 2009-10-22T17:32:02.367
47
votes
10
answers

XSS filtering function in PHP

php filter xss
asked 2009-08-26T18:53:30.767
11
votes
5
answers

Default escaping in Freemarker

java xss escaping freemarker
asked 2009-08-12T10:59:45.917
12
votes
4
answers

HTML Purifier - what to purify?

php html xhtml xss htmlpurifier
asked 2009-07-31T00:05:42.823
15
votes
2
answers

Should I use the Anti-XSS Security Runtime Engine in ASP.NET MVC?

asp.net-mvc xss antixsslibrary
asked 2009-06-16T20:16:40.670
13
votes
2
answers

How exactly is the same-domain policy enforced?

ajax subdomain xss
asked 2009-05-30T12:40:25.973
17
votes
5
answers

Anti XSS and Classic ASP

security asp-classic xss
asked 2009-04-07T13:59:27.777
26
votes
5
answers

Escaping HTML in Rails

ruby-on-rails xss
asked 2009-03-30T19:36:51.830
12
votes
6
answers

Ways to prevent SQL Injection Attack & XSS in Java Web Application

java regex xss sql-injection
asked 2009-01-27T20:12:16.850
10
votes
6
answers

How I do to force the browser to not store the HTML form field data?

asp.net security xss forms
asked 2009-01-23T03:28:54.063
10
votes
7
answers

Preventing XSS (Cross-site Scripting)

asp.net asp.net-mvc security xss
asked 2009-01-15T00:11:31.620
18
votes
4
answers

XSS Torture Test - does it exist?

testing xss user-input
asked 2008-11-01T16:10:20.110
28
votes
6
answers

Is it possible for a XSS attack to obtain HttpOnly cookies?

security cookies xss
asked 2008-10-23T01:07:37.250
83
votes
12
answers

Best way to handle security and avoid XSS with user entered URLs

security url xss html-sanitizing
asked 2008-10-15T18:46:52.310
1287
votes
17
answers

How can I sanitize user input with PHP?

php security xss sql-injection user-input
asked 2008-09-24T20:20:39.650
109
votes
11
answers

How do you set up use HttpOnly cookies in PHP

php security cookies xss httponly
asked 2008-08-31T14:27:50.337
78
votes
11
answers

How do you configure HttpOnly cookies in tomcat / java webapps?

java security cookies xss httponly
asked 2008-08-28T21:09:30.707