Tagged Questions
1
vote
1answer
134 views
Security in Authentication in single page apps
What's the most secure method of performing authentication in a single paged apps? I'm not talking about any specific client-side or server-side frameworks, but just general guidelines or best ...
2
votes
1answer
101 views
How to verify data from localStorage on a server
On my mobile app, I am storing the username of a logged in person, and downloading some data for the given/stored username. When the user checks for updates to his data content on the server, the ...
35
votes
11answers
2k views
Is there any reason not to go directly from client-side Javascript to a database? [duplicate]
Possible Duplicate:
Writing Web “server less” applications
So, let's say I'm going to build a Stack Exchange clone and I decide to use something like CouchDB as my backend store. If I use ...
1
vote
1answer
225 views
Is the escaping provided by the Google-Gson library enough to ensure a safe JSON payload?
I am currently using the Google-Gson library to convert Java objects into JSON inside a web service.
Once the object has been converted to JSON, it is returned to the client to be converted into a ...
3
votes
2answers
254 views
Should I be using a JavaScript SPA designed when security is important
I asked something kind of similar on stackoverflow with a particular piece of code however I want to try to ask this in a broader sense.
So I have this web application that I have started to write in ...
3
votes
1answer
119 views
How secure (or insecure) is it to install Node packages globally?
Should I be concerned with security when installing Node packages globally? Why or why not?
1
vote
1answer
189 views
How can we change/protect the namespace of an object in Javascript?
Continuing from my previous question: Javascript simple sample code to understand prototype-based OOP basics
Let's say we run into console this two separate objects(even if they are called child and ...
8
votes
7answers
5k views
How secure is localstorage?
The question says it all really. I want to provide a service but I do not want to store any of the data myself in a database. With all the recent news of hacking etc it seems to me that it is nicer ...
15
votes
9answers
6k views
Why almost no webpages hash passwords in the client before submitting (and hashing them again on the server), as to “protect” against password reuse?
Relevant XKCD
There are many sites on the Internet that require login information, and the only way to protect against password reusing is the "promise" that the passwords are hashed on the server, ...
1
vote
1answer
183 views
Javascript: Safely upload a client data file
I'm (still) working on a template-based XML editing program. It's a GUI-based XML editor that only allows users to add certain tags and attributes based off the requirements. You can see the current ...
1
vote
2answers
275 views
Securing client->database game
OK, I am creating a game using JavaScript and HTML5. The variables such as map, x, y, level, exp, etc are stored in JavaScript to keep track. On my client page, the JavaScript variables are stored to ...
1
vote
2answers
291 views
Provide a URL to a CouchDB document attachment without giving the username/password?
I posted this question on DBA, but it got closed and was never reopened even after I rewrote the whole thing to be more specific. I think its more appropriate for programmers anyway :)
Background ...
5
votes
1answer
360 views
Means for (legit) cross-site scripting
Are there good means for allowing scripts from two or more domains to collaborate in the same browser page? I want to create an extensible platform, where I provide the model and some views, but also ...
1
vote
1answer
282 views
Why hasn't Caja been popular?
Google released Caja around 2008(Capability JavaScript). It is still mainly a laboratory language. But XSS and other attacks would be prevented if there was widespread integration of Caja.
-2
votes
1answer
237 views
How is JavaScript insecure, and what are the main methods used to deal with that?
I just read about Caja, which is a "sanitized" version of JavaScript. But I'm wondering - what is the big problem with JavaScript(it seems so widely used )? Just how dangerous is it?
