Explore >> Select a destination
|
You are here 
|
blog.val.town | ||
| | | | |
www.trevorlasn.com
|
|
| | | | | Tips for Keeping All Frontend Applications Secure | |
| | | | |
www.matuzo.at
|
|
| | | | | An introduction to Cross Site Scripting and XSS prevention. | |
| | | | |
neilmadden.blog
|
|
| | | | | A message I'm very used to seeing - but does XSS have to mean game over for web security? There's a persistent belief among web security people that cross-site scripting (XSS) is a "game over" event for defence: there is no effective way to recover if an attacker can inject code into your site. Brian... | |
| | | | |
mathieu.fenniak.net
|
|
| | | Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank: | ||
