Top "Security" questions

Topics relating to application security and attacks against software.

Why are iframes considered dangerous and a security risk?

Why are iframes considered dangerous and a security risk? Can someone describe an example of a case where it can …

html security iframe
How permission can be checked at runtime without throwing SecurityException?

I design a function that may get/set a resource from SD and if not found from sd then take …

android security permissions runtime
Check if a file exists locally using JavaScript only

I want to check if a file exists locally, where the HTML file is located. It has to be JavaScript. …

javascript html security titanium local-files
Is it possible to decrypt SHA1

Is it possible to decrypt(retain the actual string) the password which is saved in db using SHA1 algorithm. Example:…

security spring-security sha1 sha
Random number in range [min - max] using PHP

Is there a way to generate a random number based on a min and max? For example, if min was 1 …

php security random
Why java.security.NoSuchProviderException No such provider: BC?

The jar (bcprov-jdk16-145.jar) has been added to the project, Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider()) has …

java security cryptography jce
Why is it common to put CSRF prevention tokens in cookies?

I'm trying to understand the whole issue with CSRF and appropriate ways to prevent it. (Resources I've read, understand, and …

security cookies web csrf owasp
How to validate domain credentials?

I want to validate a set of credentials against the domain controller. e.g.: Username: STACKOVERFLOW\joel Password: splotchy Method 1. …

c# windows security authentication
Run local java applet in browser (chrome/firefox) "Your security settings have blocked a local application from running"

I'm trying to run a Java Applet (html file), but the browser keeps saying: "Your security settings have blocked a …

java security ubuntu applet updates
OAuth2 and Google API: access token expiration time?

We have a standalone Java application (see "Installed application") which runs periodically and uses Google API (updates some information from …

security google-api oauth-2.0 google-api-java-client google-oauth