JavaScript College

I'm getting Client DOM Open Redirect security issue on scan for the following piece of code. Th… Read more Client Dom Open Redirect For Javascript

I read an article about bookmarklets which says that bookmarklets are so powerful they can be dange… Read more In Modern Browsers, Is There Any Security Limitation For Javascript Bookmarklets?

I have recently inherited control of a web application (primarily PHP, but also a good chunk of Jav… Read more Guidance On Database Access Best Practices

if I want to validate the input of a , and want it to contain, for example, only numerical values, … Read more Can A Regex Whitespace Character Cause An Injection?

I was making(not now, but still I'm curious about this one) a game using HTML5 and JS, and one … Read more Use Eval Without Threat Of Xss

I have a question about how to develop my web application security. Assuming that all the javascrip… Read more Security Modifing App State From Javascript

I am trying to prevent a user to be able to call a Meteor method too often with the Meteor package … Read more Meteor: Limiting Ddp Connections With Ddp-rate-limiter Package

I have a web application which is in php and java script. if someone tries to enter the path of th… Read more Deny Direct Access To Javascript Files In Iis Web Server

I have a queastion about ActiveXObject in javascript. I have tryed this code in Mozila FireFox 6.0.… Read more Javascript Activexobject

I'm using the client-side Cognito Javascript SDK. Part of the setup requires configuring regio… Read more Is It Safe To Expose The Aws Cognito Ids?

JSON allows you to retrieve data in multiple formats from an AJAX call. For example: $.get(sourceUr… Read more Is Getting Json Data With Jquery Safe?

I don't want to directly import security_access_key in my application due to security reason. I… Read more How To Secure Security_access_key In React Js Application?

I have p12 file, where I should get X.509 Certificate. In order to work with this file I use forge … Read more Node Js, How To Extract X.509 Certificate From P12 File?

The HTML5 clipboard is awesome, but I am looking for a way to make it safe. The user is pasting tex… Read more Sanitize All Scripts From Html String

I'm experiencing a weird problem trying to debug an ASP.NET + jQuery + jQueryUI web application… Read more Can Windows' Enhanced Security Break Jqueryui's Datepicker?

I'm trying to do a PoC for a Cross Frame Scripting attack (https://www.owasp.org/index.php/Cros… Read more Frame Onkeydown Feedback

Starting a new Ember app and was prepared to follow token authentication type structure for authent… Read more Ember Best Practices For Loading Javascript/app Only After Authentication

Here's the summary of my code: My website basically just loops the content of all the rows of … Read more Is It Safe To Put An Id (will Insert In Db) Into A Hidden Input?

Anyone know a good lib where i can run the strings before they are inserted, that can strip out sql… Read more Lib To Protect Sql/javascript Injection For Java/jsp

Is there any way to prevent a user from overriding a native function? Example: var getRand; (functi… Read more Can I Protect Native Javascript Functions