JavaScript Controls

I have been searching on Google and SO for hours now but without finding the someone with the same … Read more Having A Public Api But Only Allowing Access To Requests Sent From My Website

I have recently inherited control of a web application (primarily PHP, but also a good chunk of Jav… Read more Guidance On Database Access Best Practices

I am designing a web site in which users solve puzzles as quickly as they can. JavaScript is used t… Read more How To Check Authenticity Of An Ajax Request

I don't want to directly import security_access_key in my application due to security reason. I… Read more How To Secure Security_access_key In React Js Application?

I am building a website and I have a questions with forms on login/registration page. I have a few … Read more Is Javascript Validation Enough To Keep My Forms Secure?

I've made a simple web page for business clients that operates on MySQL database used mainly by… Read more Safe Mysql Password On Shared Hosting

I know how the cookies work, just started to dig why Codeigniter does not store generated csrf tok… Read more How Browsers Know What Cookies To Send To Server When Requesting?

JSON allows you to retrieve data in multiple formats from an AJAX call. For example: $.get(sourceUr… Read more Is Getting Json Data With Jquery Safe?

I have to create generator for web tests (using HTML and JavaScript). Test has to work offline and… Read more Secure Data In Javascript

With paypal's client side checkout they claim you can simply drop their code onto your site (fr… Read more Secure Paypal Checkout Client-side?

I am creating a website which until now is pure PHP. I was thinking that since very few people do … Read more Does Ajax Increase Or Decrease Security?

I'm aware that there is a Cross site forgery attack that can be performed on a request that ret… Read more Is It Possible To Perform A Cross Site Site Request Forgery Attack On A Url That Returns A Json Object?

This has been stressing me out.. I have a hidden input: I'm populating the hidden input with … Read more Prevent Hidden Input From Being Altered

I have a textarea inside a form. Before the form is submitted, the textarea is validated and checke… Read more Compare Array Of Words To A Textarea Input With Javascript

According to the spec (Annex C), strict-mode code can't do pretty much anything that might assi… Read more Why Does Ecmascript 5 Strict Mode Go To Such Great Lengths To Restrict The Identifier `eval`

I'm trying to do a PoC for a Cross Frame Scripting attack (https://www.owasp.org/index.php/Cros… Read more Frame Onkeydown Feedback

I have a webapp which has angularJS on the frontend and Java on the backed. Angular communicates wi… Read more How To Integrate Angularjs And Java Jaas Based Authentication?

For the passport input field: When the Solution 1: Short answer: It can not be prevented, unfor… Read more Prevent User To Find Password Through Firebug/chrome Dev Tools

I have a web application (Java) that I am trying to launch. The user needs to login to the system t… Read more Web Authentication - How To Securely Transfer Username/password From The Client To The Server

Starting a new Ember app and was prepared to follow token authentication type structure for authent… Read more Ember Best Practices For Loading Javascript/app Only After Authentication