Html5 Manual

On a form of my web app, I've got a hidden field that I need to protect from tampering for secu… Read more How To Detect Hidden Field Tampering?

I want to allow users to create tiny templates that I then render in Django with a predefined conte… Read more Making User-made Html Templates Safe

I have a login system which is an html form and I need to send the username and password back to th… Read more How To Securely Pass Data From Php Forms To Html

My friend has a web site on ovh.com.Since a couple of days, the site is flagged as dangerous by goo… Read more Personal Web Site Hacked On Ovh.com, Code Added In Html

adding in security questions so that users may reset their passwords if they exceed maximum attempt… Read more Can Hidden Fields Be Edited By The User?

I need to implement a simple and efficient XSS Filter in C++ for CppCMS. I can't use existing h… Read more Writing Xss Filter For (x)html Based On White List

Nowadays I am learning about web security, XSS, etc. As XSS basically targets a client-agent (web b… Read more Why Can't We Have Some Antixss Literal Html Tag

Scenario: I am working on Javascript code that allows running arbitrary user-supplied code in a web… Read more Is It Possible To Read Local Variables Of Parent Stackframes?

So, going from the discussion here where I was soundly rebuked and for good reason. I want to give … Read more How To Change Clients' Site Dynamically?

I have to process a feed from a data provider, in this feed they provide us with image URL, current… Read more Is It Secure To Blindly Trust Image Urls And Output Them Into Html Img Tags On A Site? Can It Be Used To Inject Code?

I've found a lot of info on sanitizing, filtering, and validating forms when it comes to simple… Read more Data Filtering, Sanitation, And Validation For Html-allowed Inputs

I have a queastion about ActiveXObject in javascript. I have tryed this code in Mozila FireFox 6.0.… Read more Javascript Activexobject

What security threads would canvas.toDataURL generate in general? What measures we have to take to … Read more What Are Security Concerns Around Use Of Canvas.todataurl?

I have a queastion about ActiveXObject in javascript. I have tryed this code in Mozila FireFox 6.0.… Read more JavaScript ActiveXObject

I wrote a server-client app in javascript/HTML5 its supposed to allow clients to communicate/play a… Read more How To Save Unauthorised Manipulation In A JavaScript

Recently I worked on a library that supports using workers for some heavy lifting. I found out that… Read more Why Are Cross Origin Workers Blocked And Why Is The Workaround Ok?