csrf

相关标签：javascript jquery android 多少钱 iPhone

CodeIgniter CSRF and localhost

I am currently working locally (myhostname.local) to begin a development proj开发者_如何学Pythonect in CodeIgniter and am trying to do a simple login form submission and the CSRF protection is not wor[详细]

2023-03-01 14:02 分类：问答
IE8: Submit a form within an iFrame does not work

I have a frameset with an iFrame with a form in it. When I submit the form IE8 does not send the form values. Firefox does.[详细]

2023-03-01 01:48 分类：问答
What should I do in case of a cross site request forgery attack?

I’m trying to prevent CSRF attacks. I’ve stored a random value in the session and in the form. When processing the form, I compare the two values.[详细]

2023-02-28 21:54 分类：问答
CSRF validation using Tomcat 6 without using external packages

CSRF protection for 开发者_如何学Goa JSF based web app and Tomcat6 backend without using any external packages.[详细]

2023-02-28 21:37 分类：问答
Is worrying about XSS,CSRF,sql injection, cookie stealing enough to cover web-security?

Web applications on uncompromised computers are vulnerable to XSS,CRSF,sql injection attacks and cookie stealing in unsecure wifi environments.[详细]

2023-02-28 08:36 分类：问答
Basic cookie & CSRF question

I\'m currently learning more about CSRF and I have a basic question about cookies. From Jeff Atwood\'s article on CSRF:[详细]

2023-02-28 04:14 分类：问答
how to make a cross domain request that isnt forgeable

I need to get some data from Site B into Site A\'s server side. In order to make the request to Site B to retrieve the data, there are cookies associated with Site B\'s domain which need to be present[详细]

2023-02-25 16:28 分类：问答
CSRF tokens vs Nonce confusion - are they the same?

In a attempt to make the current application I\'m developing more secure, I\'ve been reading about CSRF tokens and also Nonce.[详细]

2023-02-25 03:46 分类：问答
Turn off CSRF token in rails 3

I have a rails app that serves some APIs to an iPhone application. I want to be able to simply post on a resource without minding on get the correct CSRF token.[详细]

2023-02-25 03:08 分类：问答
Protecting a protected JSON web service from data harvesting?

We have a JSON web service that is is used by one of our webpages to show \"live\" data. To get to the page, the user must be logged in. We are concerned about the ability of malicious sites (competit[详细]

2023-02-24 19:42 分类：问答