JavaScript Apprenticeships

It seems there is currently no pure JavaScript method for accessing the system clipboard using most… Read more Why Is Writing To The Clipboard In Js Considered A Security Hole?

This has been stressing me out.. I have a hidden input: I'm populating the hidden input with … Read more Prevent Hidden Input From Being Altered

In reading about how to avoid json hijacking I've come across various methods including POSTing… Read more Difference Between ")]}',\n" And "{} &&" In Avoiding Json Hijacking

I'm thinking about trying Firebase and have spent the day looking at example projects and the d… Read more Understanding Securing Firebase Code

I don't want to directly import security_access_key in my application due to security reason. I… Read more How To Secure Security_access_key In React Js Application?

According to the spec (Annex C), strict-mode code can't do pretty much anything that might assi… Read more Why Does Ecmascript 5 Strict Mode Go To Such Great Lengths To Restrict The Identifier `eval`

There is a Node.js project that sanitizes data and there is an OWASP library for JavaScript that ha… Read more Javascript Xss Prevention

I've been working with Socket.IO for a few days and it's been both extremely exciting and e… Read more How Do I Secure Socket.io?

I have a web application (Java) that I am trying to launch. The user needs to login to the system t… Read more Web Authentication - How To Securely Transfer Username/password From The Client To The Server

How can I protect my implemented JS methods from user? So that no one could copy these methods. Nor… Read more How To Protect/hide Javascript Method Or Js File From User To View

Right now our application is designed to facilitate all communication via websockets after the init… Read more Securing Websockets

I have a webapp which has angularJS on the frontend and Java on the backed. Angular communicates wi… Read more How To Integrate Angularjs And Java Jaas Based Authentication?

with the DOM and cool new tools such as reactjs, should innerHTML ever be used in a javascript prog… Read more In General, In Javascript, Isn't Using Innerhtml An [in]security Issue?

Anyone know a good lib where i can run the strings before they are inserted, that can strip out sql… Read more Lib To Protect Sql/javascript Injection For Java/jsp

There is a function that returns an array from a table: GetFilteredData: function() /*========… Read more Avoid Activex To Save A File

Let's say that I have a long poll server which works as it should - when new client is connecte… Read more Long Polling Server Principle (client Authentication)

With paypal's client side checkout they claim you can simply drop their code onto your site (fr… Read more Secure Paypal Checkout Client-side?

I'm writing an intranet page for my company that requires the use of an embedded dll (COM). The… Read more Activex Control In Ie Intranet Zone - Blocked Without A Prompt?

When building a widget that is designed to be embedded on 3rd party websites, there appear to be tw… Read more Which Is More Secure - Iframe Or Cors - For Creating A Widget Intended For Embedding On 3rd Party Sites?

I was wondering if these is some kind of technique so persist sensitive data out of a web app. I kn… Read more Persist Sensitive Data In Browser? Possible?