javascript dox

I understand that CSRF is a major security concern for HTTP(S)-based applications. From the looks o… Read more Http(s) Request Security Using Random Headers

I have to create generator for web tests (using HTML and JavaScript). Test has to work offline and… Read more Secure Data In Javascript

A product I'm helping to develop will basically work like this: A Web publisher creates a new … Read more How Can I Validate/secure/authenticate A Javascript-based Post Request?

I wrote a server-client app in javascript/HTML5 its supposed to allow clients to communicate/play a… Read more How To Save Unauthorised Manipulation In A Javascript

Let's say that I have a long poll server which works as it should - when new client is connecte… Read more Long Polling Server Principle (client Authentication)

Anyone know a good lib where i can run the strings before they are inserted, that can strip out sql… Read more Lib To Protect Sql/javascript Injection For Java/jsp

I'm using the client-side Cognito Javascript SDK. Part of the setup requires configuring regio… Read more Is It Safe To Expose The Aws Cognito Ids?

I have a web application (Java) that I am trying to launch. The user needs to login to the system t… Read more Web Authentication - How To Securely Transfer Username/password From The Client To The Server

Is there any javascript function that can encrypt data: For example i want to use encrypted data in… Read more How To Encrypt Data In Javascript And Decrypt In Php?

I'm having to work on an old web app that a previous developer left. It is using addslashes() t… Read more Is Addslashes() Safe To Prevent Xss In A Html Attribute?

I am trying to prevent a user to be able to call a Meteor method too often with the Meteor package … Read more Meteor: Limiting Ddp Connections With Ddp-rate-limiter Package

I am looking for advice/criticism on how best to control access to an HTML5 application that is use… Read more Html5 Offline Authentication

From the page file://localhost/Users/pistacchio/dev/epress/catflow/test_html/index.html I have the … Read more Unsafe Javascript Attempt To Access Frame With Url (same Domain!)

I've made a simple web page for business clients that operates on MySQL database used mainly by… Read more Safe Mysql Password On Shared Hosting

There is a function that returns an array from a table: GetFilteredData: function() /*========… Read more Avoid Activex To Save A File

I have a textarea inside a form. Before the form is submitted, the textarea is validated and checke… Read more Compare Array Of Words To A Textarea Input With Javascript

I'm working on games using javascript some html and css, and I was wondering if there was any w… Read more How To Make A Secure Game In Javascript?

JSON allows you to retrieve data in multiple formats from an AJAX call. For example: $.get(sourceUr… Read more Is Getting Json Data With Jquery Safe?

Right now our application is designed to facilitate all communication via websockets after the init… Read more Securing Websockets

There is a very particular edge case in cross-domain policies regarding the window.top.Location obj… Read more What Exactly Can An Iframe Do With The Top.location Object (cross-domain)?