JavaScript Lib

After setting up eslint-plugin-security, I went on to attempt to address nearly 400 uses of square … Read more How Can I Mitigate Injection/exfiltration Attacks From Dynamic Property Accesses (i.e. Square Bracket Notation) In Javascript?

Let's say that I have a long poll server which works as it should - when new client is connecte… Read more Long Polling Server Principle (client Authentication)

I am building a user registration workflow for my JavaScript/PHP website. Once the user registers, … Read more Security Considerations For Javascript/php Registration Email Confirmation Workflow

How can I protect my implemented JS methods from user? So that no one could copy these methods. Nor… Read more How To Protect/hide Javascript Method Or Js File From User To View

Our web application (based on HTML5, SVG & JS) runs fine in all the browsers except Google Chro… Read more Unsafe Javascript Attempt To Access Frame In Google Chrome

Well not exactly. If I just draw (ex lines,rect...) and try to export the canvas as an image. It wo… Read more Get Security Error When Saving Canvas Object Into An Image

Anyone know a good lib where i can run the strings before they are inserted, that can strip out sql… Read more Lib To Protect Sql/javascript Injection For Java/jsp

Is there any javascript function that can encrypt data: For example i want to use encrypted data in… Read more How To Encrypt Data In Javascript And Decrypt In Php?

I am working on a problem where i want to restrict a user to open a PHP page This is my javascript-… Read more How To Restrict User To Open A Existing Php Page?

I've noticed for a very long time that when you try to copy a link location or open a link on F… Read more Why Do Browsers Allow Onmousedown Js To Change Href?

I have a webapp which has angularJS on the frontend and Java on the backed. Angular communicates wi… Read more How To Integrate Angularjs And Java Jaas Based Authentication?

Imagine a scenario where I want to continuously invoke user-supplied Javascript code, like in the f… Read more How To Safely Run User-supplied Javascript Code Inside The Browser?

Starting a new Ember app and was prepared to follow token authentication type structure for authent… Read more Ember Best Practices For Loading Javascript/app Only After Authentication

For the passport input field: When the Solution 1: Short answer: It can not be prevented, unfor… Read more Prevent User To Find Password Through Firebug/chrome Dev Tools

I'm thinking about trying Firebase and have spent the day looking at example projects and the d… Read more Understanding Securing Firebase Code

I need to send an ajax POST request to my server. I'll need to make sure that the request origi… Read more Using Public/private Keys In Javascript

I was making(not now, but still I'm curious about this one) a game using HTML5 and JS, and one … Read more Use Eval Without Threat Of Xss

I am looking for advice/criticism on how best to control access to an HTML5 application that is use… Read more Html5 Offline Authentication

What security threads would canvas.toDataURL generate in general? What measures we have to take to … Read more What Are Security Concerns Around Use Of Canvas.todataurl?

I'm using the client-side Cognito Javascript SDK. Part of the setup requires configuring regio… Read more Is It Safe To Expose The Aws Cognito Ids?