Skip to main content
Information Security

Explore our questions

Ask Question
more tags
Active Hot Week Month
1 vote
1 answer
1k views

Implications of accessing a web app via a VPN

Community's user avatar
CommunityBot
  • 1
26 votes
6 answers
99k views

Is there a way to download a PHP file without it being executed?

John Peter Espanto's user avatar
John Peter Espanto
  • 1
4 votes
2 answers
1k views

How to securely store 3rd party API keys directly on web server

Community's user avatar
CommunityBot
  • 1
2 votes
1 answer
49 views

Is it best practice to expose tenant login configurations via a public GET endpoint for Auth0?

Ja1024's user avatar
Ja1024
  • 34.2k
1 vote
1 answer
356 views

How to isolate VMs with internet exposed websites on my home network?

Community's user avatar
CommunityBot
  • 1
0 votes
1 answer
54 views

Is this an effective scheme to store EEE key on browser client?

Ja1024's user avatar
Ja1024
  • 34.2k
1 vote
3 answers
4k views

Prevent URL encoding on form submit

Community's user avatar
CommunityBot
  • 1
5 votes
1 answer
1k views

Google CSP Evaluator and style-src 'unsafe-inline'

Community's user avatar
CommunityBot
  • 1
2 votes
1 answer
5k views

Path Truncation not working in PHP while exploiting LFI

Moshe Katz's user avatar
Moshe Katz
  • 1,390
2 votes
1 answer
16k views

XSS in <span> where only < and > are encoded

Community's user avatar
CommunityBot
  • 1
1 vote
1 answer
287 views

How to prevent shopping cart alterations in another tab when paymentintent is already created?

Community's user avatar
CommunityBot
  • 1
0 votes
1 answer
205 views

Benefit of Parameter Map size validation in web application controller

Mario's user avatar
Mario
  • 224
2 votes
5 answers
1k views

Is OAuth more secure compared to API Keys

CBHacking's user avatar
CBHacking
  • 53.4k
3 votes
2 answers
820 views

Benefits of placing WAF reverse proxy/transparent in front of web-based honeypots?

Mario's user avatar
Mario
  • 224
Browse more Questions