Html5 Cafe

I have a queastion about ActiveXObject in javascript. I have tryed this code in Mozila FireFox 6.0.… Read more Javascript Activexobject

adding in security questions so that users may reset their passwords if they exceed maximum attempt… Read more Can Hidden Fields Be Edited By The User?

What security threads would canvas.toDataURL generate in general? What measures we have to take to … Read more What Are Security Concerns Around Use Of Canvas.todataurl?

I need to implement a simple and efficient XSS Filter in C++ for CppCMS. I can't use existing h… Read more Writing Xss Filter For (x)html Based On White List

On my website, users will be able to input html tags for the content so the text can be bold, itali… Read more Show Html User Input, Security Issue

I have a textarea inside a form. Before the form is submitted, the textarea is validated and checke… Read more Compare Array Of Words To A Textarea Input With Javascript

So, going from the discussion here where I was soundly rebuked and for good reason. I want to give … Read more How To Change Clients' Site Dynamically?

Nowadays I am learning about web security, XSS, etc. As XSS basically targets a client-agent (web b… Read more Why Can't We Have Some Antixss Literal Html Tag

Well not exactly. If I just draw (ex lines,rect...) and try to export the canvas as an image. It wo… Read more Get Security Error When Saving Canvas Object Into An Image

Recently I worked on a library that supports using workers for some heavy lifting. I found out that… Read more Why Are Cross Origin Workers Blocked And Why Is The Workaround Ok?

I want to allow users to create tiny templates that I then render in Django with a predefined conte… Read more Making User-made Html Templates Safe

I am looking for advice/criticism on how best to control access to an HTML5 application that is use… Read more Html5 Offline Authentication

I was wondering if these is some kind of technique so persist sensitive data out of a web app. I kn… Read more Persist Sensitive Data In Browser? Possible?

I am creating a login-function on my website, and I am thinking about regenerating the session ID o… Read more Php "session_regenerate_id" And Authentication Of Users

I've found a lot of info on sanitizing, filtering, and validating forms when it comes to simple… Read more Data Filtering, Sanitation, And Validation For Html-allowed Inputs

Let's say I have some code that creates an HTML page with a JSON service call. How can I preven… Read more Prevent Others From Calling Your Json Web Service

I have this regex: var alphaExp = /^[a-zA-ZåäöÅÄÖ\s]+$/; This is for a name-field in a form vali… Read more Include The Hyphen Into This Regular Expression, How?

Storing credit card info in web servers under my company's control creates severe security risk… Read more What Are The Security Implications Of Html5 Local Storage For Credit Card Info

On a form of my web app, I've got a hidden field that I need to protect from tampering for secu… Read more How To Detect Hidden Field Tampering?

My friend has a web site on ovh.com.Since a couple of days, the site is flagged as dangerous by goo… Read more Personal Web Site Hacked On Ovh.com, Code Added In Html